c015cf03e6500f63b8dbb62b373e1a3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c015cf03e6500f63b8dbb62b373e1a3a_JaffaCakes118
Size

28KB
MD5

c015cf03e6500f63b8dbb62b373e1a3a
SHA1

310d0372658ce53fee20a967088592233d05bd41
SHA256

36c22c83a9cae0aec826c9bff23795b95142230c19947e2a5b2edd956013ab9d
SHA512

60be4ee50802f20a4ab5e06b9cc5238f2fcde3729a262982a9130ad1fe8194b8ad52e009e2be486168959d657fae9e88b6370a48ca1ccf748f0d7e6da72e83ce
SSDEEP

384:YCvo0TOaTAuX4F2/BgTiBfnVKv4VQd1MdIm3oEcsDosXDSQiNn3lFa:9vo0ikAuq2QU4QKOIm3DzzDS3lV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c015cf03e6500f63b8dbb62b373e1a3a_JaffaCakes118

Files

c015cf03e6500f63b8dbb62b373e1a3a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ