b1f864ad13c164a7e31004b260fcb804_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1f864ad13c164a7e31004b260fcb804_JaffaCakes118
Size

675KB
MD5

b1f864ad13c164a7e31004b260fcb804
SHA1

8a0f48c885590a8b0b913ac0b63b533f3083dfbd
SHA256

f68aba098c1d5ccab17308e83b79ce1b826eee2e600386c87c5cf9cf649b3174
SHA512

54ee91ddcde030c7fc96b7090b2b846adc3ac8045ec9fcc955818b20de870c53d0814f7db0b2dee2dcafe730aa33d183caae40df136930df34939e7ee4a4179b
SSDEEP

12288:mwDC/gs6V8UoKlNGGCGGZxkC0x80nJhQDjBg:tDC6WUoEAyceCdq+D1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1f864ad13c164a7e31004b260fcb804_JaffaCakes118

Files

b1f864ad13c164a7e31004b260fcb804_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

logonui.pdb

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE