b7b148f175fd54b134fdbb989e05bfe2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7b148f175fd54b134fdbb989e05bfe2_JaffaCakes118
Size

954KB
MD5

b7b148f175fd54b134fdbb989e05bfe2
SHA1

06496f6a9b1a6c3d84e59dc4cdf024a04a0715bf
SHA256

6ee89b5db18bb42027964c458b57b220c60617b2a2400656e0acda5d4f8f8c4d
SHA512

c40dff870a9cb4224be0a34ba5bf43d52dc8f26af7b8309a74d922211886c7a9ee902c6c9af55baeaab53d5621dca8e9b52bcc92bfcabcd65d765d5d21703ba8
SSDEEP

24576:b0a4zexH3fHP/RdbUefYLQwiGvJUs/ylR74vRds:byetxdVgQJGvJa74vRds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7b148f175fd54b134fdbb989e05bfe2_JaffaCakes118

Files

b7b148f175fd54b134fdbb989e05bfe2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE