d31437331e7e64f6dfe5ed7bdee24b52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d31437331e7e64f6dfe5ed7bdee24b52_JaffaCakes118
Size

13KB
MD5

d31437331e7e64f6dfe5ed7bdee24b52
SHA1

156936ef5d2353251004308805f5221717e08616
SHA256

98b77b3e944980742a93ff8d8c2858bd3b4dc06f00785ca0b6a6428cf38ba39b
SHA512

8bf8a44c4314016acc2a4c9547e74fa72d9f11b915ed13db12806f6669da95ef78c4a8820b1560089d48be77bf8c063612fe766cdea34041d97e15a0e9e68746
SSDEEP

384:uZQ1DZwvO7txXBZl+fBQm3WgRtlKPZz5S0QZHV4Ef:a4wO7XBz+5Qm3W0tYdrQZHV4Ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d31437331e7e64f6dfe5ed7bdee24b52_JaffaCakes118

Files

d31437331e7e64f6dfe5ed7bdee24b52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ