d267659991278f4f1fdfb3070823f2e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d267659991278f4f1fdfb3070823f2e9_JaffaCakes118
Size

2.5MB
MD5

d267659991278f4f1fdfb3070823f2e9
SHA1

014fe4d7a9ec98f63e6698bd9c57de24f73ed71c
SHA256

e8c0478d4a82d121704ee6b4e7272ce52c7432fc03d40718f86f55b124277b10
SHA512

4e7e8d2d2007a6e254a3b46f8f61644ae4dee61fc406b963b2b986392a22b1dac49f7ef9ee12e80b827731803af88d54898ccbd4c2a7e1936bec635afd496a44
SSDEEP

49152:5aw6JEHBm71W0XVr0nQqzDKYVMesvSvUxWZ0e3V3uRpYainXBgJ:QtJEH071WIHYbsvS8xWZr3V+R2JRgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d267659991278f4f1fdfb3070823f2e9_JaffaCakes118

Files

d267659991278f4f1fdfb3070823f2e9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ