b0f86de903ffb88a1dd6ebf1c8e2ab03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0f86de903ffb88a1dd6ebf1c8e2ab03_JaffaCakes118
Size

580KB
MD5

b0f86de903ffb88a1dd6ebf1c8e2ab03
SHA1

936b0a0ef65ee1c09b22d9a8a9ccaf266a679be8
SHA256

d3ea282cb8c1eb7f1a14c2012d7640cecf151dac9d93c7be4d3dae8d006caa22
SHA512

ea6687c0466ce36b5b66da9867f9c9bb42ac3bae647932cdc6c6fdf2fcf6954953f0d63e44060b77d1e777c12e1afa64d58608815f0d27a0cfe1707e9af3205c
SSDEEP

6144:9g67wjsJHnPyNmeAJg57xoP3yf1UHmUwPSWpg2f82U6rk:C67jqNmev57xoPifrPS2g206r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f86de903ffb88a1dd6ebf1c8e2ab03_JaffaCakes118

Files

b0f86de903ffb88a1dd6ebf1c8e2ab03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 85KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE