d0860b2f6bb7362818abb340b7edad73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0860b2f6bb7362818abb340b7edad73_JaffaCakes118
Size

19KB
MD5

d0860b2f6bb7362818abb340b7edad73
SHA1

fd21ceb32bf873f9c0fb01911cd735c38c9250d4
SHA256

416cf78c8b290afc182c90932362fd382ec382251d59f99eb34ad2b28f2883ce
SHA512

4f4fa9d92a2b2543f910159e60a3b00471024116c97d67ade564c1f5f920e786928a17c23f3b4efcc312be5ce6af78efc790da12275b7fb7ad977a355bc0e812
SSDEEP

384:1ISAwEkCD4sea/Li6evW+frB90A30HC037Z0Ac0lL0oksmUb1QZFAOV61yAdyAL:1ISTI/Li6evW+frB90A30HC037Z0Ac0v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0860b2f6bb7362818abb340b7edad73_JaffaCakes118

Files

d0860b2f6bb7362818abb340b7edad73_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ