c79bca430f7e425e9dd965da86c39596_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c79bca430f7e425e9dd965da86c39596_JaffaCakes118
Size

1KB
MD5

c79bca430f7e425e9dd965da86c39596
SHA1

9f75251178746d8c36dda87eeb31dc0229991e68
SHA256

d87bc27fa449784ca8b0166fecc2af222d014bda9b9a2117fc5c3da3ee58ff7a
SHA512

f0ba7cc8b8dd738c2be52514db6c1ddb40f41166b5b992ff01a5920fd6e61e960324ea03be08562503c3bdab2401a9eb1b4cd3ebd951a3fed5fb99e5c6ddeeac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c79bca430f7e425e9dd965da86c39596_JaffaCakes118

Files

c79bca430f7e425e9dd965da86c39596_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE