b69444dfc54060c95c013c428a32a490_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b69444dfc54060c95c013c428a32a490_JaffaCakes118
Size

46KB
MD5

b69444dfc54060c95c013c428a32a490
SHA1

80178f92741f2f9dbd5c97ec4f2b55bf61d1906a
SHA256

c1b0d1b1b43d1f48485c855c345c6c2269f742845ffc7b2c2788ad71d30dd0f4
SHA512

43b7a4fc205b2c10ccf01e254595339c6e8d51a1d81a6b30a050a5fc98bb20bf82bb2071719d0b7db6fc8ec081d1700d70ebee319a7808fc8e9026e71e1c3011
SSDEEP

768:5+m+KgYB5IlvCAC3kTVZskxUI50P4itP8NZPu3VO+Y0vDBBuEETQ4z6B4fmeWoeZ:5iYKvCKTgk95rQWK/ETdw4fmgy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b69444dfc54060c95c013c428a32a490_JaffaCakes118

Files

b69444dfc54060c95c013c428a32a490_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ