abc694bdab22edc5859b0ff817cd5ab2_JaffaCakes118 | Triage

Sharing

General

Target

abc694bdab22edc5859b0ff817cd5ab2_JaffaCakes118
Size

211KB
MD5

abc694bdab22edc5859b0ff817cd5ab2
SHA1

de1bd5d7fbd6a725620d43684cb3a25d615e9ed7
SHA256

b8b279125690afab3326903e76b3216751fff5799f90a20e46ec071e359a8617
SHA512

774e1373d0139a4c42ad3284f4969265a52120b21b580a6d2c0933bb3160b802fcacc397ecc33ac2762b4f7bf99c6edcad4c197b1b96d9b5e08b85bc3659d197
SSDEEP

3072:YX3n8ZjBdIrghwL0BqTZnIyfjBlrdtV6HgPkq7/VgOV0On3uhezCq+:5P+gSeeNIyfjXrV6UjLVgOVZWezi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc694bdab22edc5859b0ff817cd5ab2_JaffaCakes118

Files

abc694bdab22edc5859b0ff817cd5ab2_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

lodctr.pdb

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE