b0aef9975c1c1c22bafa6462cf06301d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0aef9975c1c1c22bafa6462cf06301d_JaffaCakes118
Size

99KB
MD5

b0aef9975c1c1c22bafa6462cf06301d
SHA1

2d3f44b2db8c0853999ad7318a4811331287991b
SHA256

92039259e778b79aab6ba891d43c55f677b9066c5424f76da2c0d00493782168
SHA512

9117aa101b895f39d4a33599db15c172518ba35fa8c182b71c4f644844b9319f0e287479e5cac832ddc4d3fdd3a10763dcc8836b981369df3f8c3be424b12b9a
SSDEEP

1536:rQ2ST7S1gkksioQyQJlEISe1NCeEbV44CR1RnTOmSz1Y:XcoQyQrEIS6EbV6RrTg1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0aef9975c1c1c22bafa6462cf06301d_JaffaCakes118

Files

b0aef9975c1c1c22bafa6462cf06301d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ