b14b661f9f2524e4642ba81902115416_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b14b661f9f2524e4642ba81902115416_JaffaCakes118
Size

782KB
MD5

b14b661f9f2524e4642ba81902115416
SHA1

e21f1dbbd7e8324c35acaf18c66732e4fbddf4d0
SHA256

220057a23f187362dd2ea2aa36f50b4249edbd75ca3b06b98fd861283343172f
SHA512

b7e7611101c46d4034cd2dbf28386db420af6d2139843a2b0c2f5b1f59c2497f7df7b49ad9d8932f8aa4d424055763d382d73b79ad14cf7f42e792909870a67d
SSDEEP

24576:KYed1nLJiDWwB9sDpFr2ljsQwewQ330+51Ublv:K1zMVMDPCs4xn151Wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b14b661f9f2524e4642ba81902115416_JaffaCakes118

Files

b14b661f9f2524e4642ba81902115416_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.440vv8
Size: 3KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.djmwtc
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tss
Size: - Virtual size: 3.0MB

.rdata
Size: - Virtual size: 460KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 775KB - Virtual size: 776KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE