c049c468797d27c5a86748bccf680634_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c049c468797d27c5a86748bccf680634_JaffaCakes118
Size

67KB
MD5

c049c468797d27c5a86748bccf680634
SHA1

991faa5c8862cd5986d13735afd0a368d01bd963
SHA256

5b75388865301439879c1f29c8ce968b26761efa7bc37c2d835afc434df5da2a
SHA512

8ece519a0a2d6e1f64f9b313daa39ee1b999f3c4f18e9308f9325b4f9f3008863ea6d70cbe7a9644df43ba8b74ae42a877115863fc1b971940c3ee01243e871f
SSDEEP

1536:IjxBLypAx3k6Ok8eBBEZf/hwLPQL4IGetf9cDjDS:mJ1BBEZx0P+vVtfMjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c049c468797d27c5a86748bccf680634_JaffaCakes118

Files

c049c468797d27c5a86748bccf680634_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ