af142c1da1d14692b8f18e232c0e19da_JaffaCakes118 | Triage

Sharing

General

Target

af142c1da1d14692b8f18e232c0e19da_JaffaCakes118
Size

392KB
MD5

af142c1da1d14692b8f18e232c0e19da
SHA1

73cc39f93efe1a5ee274b2fcaad9c91fe015abfe
SHA256

c9e3660748e54241156bc6d17c90663e77ff18ec0d38d6267530e40d7492df9f
SHA512

4bf0f3371669e41287300017b6eb78922a4a79e63bd5f171069ddcbd87f78442404145296a938dd650a2ac439d18d76d1fe54fde15cc5a707dde8b77e7d00ff9
SSDEEP

6144:jgzBkIaCB8wFYjMFwLQNOhsI4LC5JB2pIsgFA4iRCrvPCi3apgbuAAcOLdhzRKE/:j15JuIs69ioLPCnpgbzOphL9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af142c1da1d14692b8f18e232c0e19da_JaffaCakes118

Files

af142c1da1d14692b8f18e232c0e19da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbs
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 356KB - Virtual size: 491KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ