cf9454f2d64c887a85693949a02e1276_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf9454f2d64c887a85693949a02e1276_JaffaCakes118
Size

16KB
MD5

cf9454f2d64c887a85693949a02e1276
SHA1

236c2b3f85f66e038bbd89f125aa029e1962de42
SHA256

44f35750f4e98b2d96b208cd366ff069be6ca58a84ad0f585c168b8c320f6529
SHA512

ea3fac1d5b724ab7c93785b4c05525dabaa1102c02fe0fed623dbc206b08546db9f15d07504f20310eb78c860e668e2d5288d6e86af4eea3993e03404eb3c39a
SSDEEP

192:oFjIJcHjwMghYPAhFU36THeBhu2wumIUgbVzHoHWL3yBfUAsNoPNFsR+9sNp0Fhv:oFjCcDwzoPBhu3pwypUAsNmrAEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9454f2d64c887a85693949a02e1276_JaffaCakes118

Files

cf9454f2d64c887a85693949a02e1276_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ