adf5a05bb7af62456ee1aa0fad9c748c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adf5a05bb7af62456ee1aa0fad9c748c_JaffaCakes118
Size

189KB
MD5

adf5a05bb7af62456ee1aa0fad9c748c
SHA1

cb2b5d9aadda5877318127e6b42226f606ae1574
SHA256

9c9a1f3ae07689fe7bc12cb31c5f2400dca2f41df4c19c1e9765e14e00da39a6
SHA512

bbf14476b136b9d799f9e78dffd1b5b9026d706ef295e3007cd5ebca5a2d03016ed35e9381ecbc42f42dc7f72a283ab914f44a4e0787ac527c0de1b72533b3bd
SSDEEP

3072:PXLVchDqK0BBxKnGbiM6Aqg24cknTtavC6a/k44k6CRs05FNeeLySBf:PXhSDj0BzdiM6Aqg24FnTI6MHCquRpBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf5a05bb7af62456ee1aa0fad9c748c_JaffaCakes118

Files

adf5a05bb7af62456ee1aa0fad9c748c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE