d15520901b5eb2c544ef6b62e0924d63_JaffaCakes118 | Triage

Sharing

General

Target

d15520901b5eb2c544ef6b62e0924d63_JaffaCakes118
Size

166KB
MD5

d15520901b5eb2c544ef6b62e0924d63
SHA1

a3f05563ec925c115cc0d1d4db3db383b0097994
SHA256

5576780e0b82c6a02b93b22f5fc2a45cd5f6bcee681dc22b3d6a4727abed2734
SHA512

1cc0d1f6e66c26cc0bbd20db06a929dddc56e55e49c6124d85ebd635dc04b000d5a547e20f71bf905a0953e162898a53962eed01cb7391af5ab45ee8eda2d4de
SSDEEP

3072:Utv2SbLr2cGe5cagg7UygVjjNEAn4zYwqcv4cr/9WUho4lgMIe:QOSbDsgFen9/cv4ygUhoGH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d15520901b5eb2c544ef6b62e0924d63_JaffaCakes118

Files

d15520901b5eb2c544ef6b62e0924d63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ