b404993ca52a64b916089c347054bea9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b404993ca52a64b916089c347054bea9_JaffaCakes118
Size

213KB
MD5

b404993ca52a64b916089c347054bea9
SHA1

87118ac2ab3b8b0dddaf6a18c32eb74a092b8278
SHA256

84ba60a08591b25af1563eb3ce1d1b27c7d6f2d6d392738416d6d0b01e587789
SHA512

e584e0ad9cbac15667f4c4d7c2de78b67a9c0e3144524b3171a8ce2921e47ddfc68fcb38bcc38e2ae9a1c9d692723a915b59d0b694f882b892607832fd44b72f
SSDEEP

6144:2KoHK800QHlKQu4DzsyAT+czNcH3/U0z7jk+uo:2KoHK8sUQu4iCX/UZ+uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b404993ca52a64b916089c347054bea9_JaffaCakes118

Files

b404993ca52a64b916089c347054bea9_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

auditpol.pdb

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE