b99ec4d5dcb4cf054e0cfeef8d8daf56_JaffaCakes118 | Triage

Sharing

General

Target

b99ec4d5dcb4cf054e0cfeef8d8daf56_JaffaCakes118
Size

408KB
MD5

b99ec4d5dcb4cf054e0cfeef8d8daf56
SHA1

be0deede4f9af2ffe518cd75ebc91f979757a98f
SHA256

1935cf3b7ac99a0693aa59a01ef007d5184ef9efd5cabf42ec3aaaed172a7411
SHA512

aea39c6a0df5e72a5caf35571420ea7cbd06a435393b6c68a60ced9c3b62d76e2278d5d020efcdfdc08342eb7bdab29ce1f9d846d6ba8e172117d21629118b20
SSDEEP

6144:bT6WsEtN7CAal/JpbVSFL7XLfetwwv0ItRZ04OIqcYjajJuqPEj:bTr59al/rsFL7bf2Jc4OIkajAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99ec4d5dcb4cf054e0cfeef8d8daf56_JaffaCakes118

Files

b99ec4d5dcb4cf054e0cfeef8d8daf56_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

migwiza.pdb

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE