b07711bf21673e10d50103eaf39c51a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b07711bf21673e10d50103eaf39c51a5_JaffaCakes118
Size

198KB
MD5

b07711bf21673e10d50103eaf39c51a5
SHA1

677002d59da692a0342caba070754396cbfebaed
SHA256

1884a83abe9848b9c0abc2738232bf31527b257f138f4b3b2af65953607d6249
SHA512

2e7afced6ec5061ffe05b0fb2be06706dab2a2edfffc7065b16456d2f5cc0495b4a0555c2dda30197e3d7e126f2f710a18d5884231a5423e22195705c1bb927b
SSDEEP

6144:4K/F9hBGZ99f9jzbFtYxYq8G5aW0ZvxhxT:4K/SZ/+2ZG5aDv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07711bf21673e10d50103eaf39c51a5_JaffaCakes118

Files

b07711bf21673e10d50103eaf39c51a5_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wmpenc.pdb

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE