aebb00278d4e994a190edf1719f28760_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aebb00278d4e994a190edf1719f28760_JaffaCakes118
Size

896KB
MD5

aebb00278d4e994a190edf1719f28760
SHA1

d35eb2a4fa141259d8fbaa32eb393a6ee2516b65
SHA256

65a25267daa35a3bc50615ac3345c50891b7d09c8758420eb9babad772a1f47b
SHA512

b8f88585d8a5f4c0a55fa219e558afe9dc77be00ac8bc07fdc3780ccd7b7f09997c5b744430b12da3f4b556856eb9d0d9e6025f60dfd5aeaa22e05a52dcf7808
SSDEEP

12288:o9V6ae4oUlDl78cxwVeIAvjzhBusevzsTrItRSViIl2OHMppZw+bQS:o95omDyc6EtTCvzsT9Vd2++bz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aebb00278d4e994a190edf1719f28760_JaffaCakes118

Files

aebb00278d4e994a190edf1719f28760_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 440KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE