d67711996e055edf41dd380051998d83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d67711996e055edf41dd380051998d83_JaffaCakes118
Size

154KB
MD5

d67711996e055edf41dd380051998d83
SHA1

e64bc5f80e1fc07c11bc601097c62080ff354d30
SHA256

c92fedf83a2fe43c39244a015caef55b3e241ede43c0ed40d36444edda3e2fb3
SHA512

afa85a73fdce9cfdeb1d5db02f91d45b73ece77bee3d3a7bc53d6b407e09b6ab6bdde47a707695fe6f2408aa4b18ef7568c94438ce00343848977a2aa76dbf0b
SSDEEP

3072:zQ2wnlF21+fPmUoGQTmGOOWN00sC+umWhKBVR1WbAn:zQRnlE1c6qGRc+uJhA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d67711996e055edf41dd380051998d83_JaffaCakes118

Files

d67711996e055edf41dd380051998d83_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 38KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ