c1ffd8576127541c43aa9ea2a95af82f_JaffaCakes118 | Triage

Sharing

General

Target

c1ffd8576127541c43aa9ea2a95af82f_JaffaCakes118
Size

77KB
MD5

c1ffd8576127541c43aa9ea2a95af82f
SHA1

e4f61471fd83324c9a626f31c5bb2c52fd356937
SHA256

9356ff2af05b4ab8f9106b9ff710d8cc0b176c736efcdb06748beddb1a8ccbea
SHA512

57242d99e77c726e432af53e86d1ea5ea020eaa04c6b704850de6173c58d87becf2b8f6c71e4d5ae3d4fca457d228301aa5b6b0fd0cc2a19189ee5cf14d1c7d3
SSDEEP

1536:FpWGijK/R+Io6kl5LZSGrbVhw/tBm1fpOkW6QrSUf:r94LZSGrnUtk9gkW5rDf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1ffd8576127541c43aa9ea2a95af82f_JaffaCakes118

Files

c1ffd8576127541c43aa9ea2a95af82f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ