d161d2e7d2e80be3be7e276f6ab7f251_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d161d2e7d2e80be3be7e276f6ab7f251_JaffaCakes118
Size

72KB
MD5

d161d2e7d2e80be3be7e276f6ab7f251
SHA1

023971ad0af10aed1f11275e0ff4df52580694f6
SHA256

170ddc44472677dfa9281e2f533145cdf27923a199bde1b8c81c2888fecbd7cf
SHA512

b7303668fd78a72ed67fd70f00ba8c4fa71dfdbed47db5df41a5cf902f2a6bd113138e158a4cf4b68f7dd5829f9400ade1c5d99dc06973577e4077191fc2720e
SSDEEP

768:vS3hp9OudRLuCJ7Rry/6znpvdD6kHY3amxt1CvYq/KyTWrBoEMSry:vS3X9iCJA/SdrY17nyKrBa2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d161d2e7d2e80be3be7e276f6ab7f251_JaffaCakes118

Files

d161d2e7d2e80be3be7e276f6ab7f251_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddvfvzf
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 384B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 912B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE