d0cb2793def57c4974d8ee0fbc0e0cd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0cb2793def57c4974d8ee0fbc0e0cd4_JaffaCakes118
Size

984KB
MD5

d0cb2793def57c4974d8ee0fbc0e0cd4
SHA1

1e3f04ac734b5e4e485a969936055922f3930ac0
SHA256

4945fe50873351ad58884ef7d433970ba8bea18aac5b1b6d3f8e89fa8675926b
SHA512

022e0d52afa21e8e41987f4a40f864ae120d6de1ac943aaf556f1b3712c02bc1d5efd169d3a0fe5fcb67fd3339283a7b226e527ec841aa7e8226460df9105487
SSDEEP

24576:Z2eaDJoAkfnWiWdKwN5execZCVL0XE8Bfq5U5bylaxVNVA:Z2dxkPWiqKwzexec8V8qlax9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0cb2793def57c4974d8ee0fbc0e0cd4_JaffaCakes118

Files

d0cb2793def57c4974d8ee0fbc0e0cd4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ