c11c64dbab358b476558f5438b76f1b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c11c64dbab358b476558f5438b76f1b5_JaffaCakes118
Size

57KB
MD5

c11c64dbab358b476558f5438b76f1b5
SHA1

406df0b14f0ec87eb448720df296b7c96e4c61e1
SHA256

1cde44a129e7544bd9d502c6f09f128ff7cb0d5e2696911716273417b13bd6fa
SHA512

f9322d0e248accccfb2bfc4b6b0151eed5055766646df14bcd03a093b99a7335003bc2a8244977c235e6f5cd50c135dfdde3c37a2cf09979f76f110cde9dae99
SSDEEP

768:QSZTrB9MR/XzTaVCFBDB9Xhce2rbnnX7:pT2zzBqemr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c11c64dbab358b476558f5438b76f1b5_JaffaCakes118

Files

c11c64dbab358b476558f5438b76f1b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOFLD
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data11
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE