d6e622c7e7301fe8453cd37289a4b870_JaffaCakes118 | Triage

Sharing

General

Target

d6e622c7e7301fe8453cd37289a4b870_JaffaCakes118
Size

230KB
MD5

d6e622c7e7301fe8453cd37289a4b870
SHA1

e3d6cdee1211fb6dd3ad041cbe4077afdc7bb3ed
SHA256

bb13dbf61aefe99a8ed0b1a0f012664b9803e503b30b0f39732ac94d03f6a553
SHA512

3729b9bf1e4eb5f00b617a47a624ff13df558775f679d76c5376d023caf62ceb5de5e433d0dba8899211cc8a67fcf62f5d954fa6c4cdebd19876febeb2bc7d24
SSDEEP

6144:TVKFpOtMvBadUSXDekfJkFr48FgLqUFhpVGLrUPxnZ:T8Fta66XJD8hUFtGcPxZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e622c7e7301fe8453cd37289a4b870_JaffaCakes118

Files

d6e622c7e7301fe8453cd37289a4b870_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

applaunch.pdb

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE