d99ca0960df5baea6926c8bc1411210e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d99ca0960df5baea6926c8bc1411210e_JaffaCakes118
Size

135KB
MD5

d99ca0960df5baea6926c8bc1411210e
SHA1

ab084a93b7c0430aa0fda85bef4e74c258537521
SHA256

46b7d0f17a61d82dc5c5c5ff64417425a23b02f5ab2d81c685ddc7d8cfacf5ee
SHA512

b433a3bb7af76c51453e6ee06ec7b00194bc3b14a53380d48bcd1b6b73cc302de25b697444189981620c7f0fc34a948a0f2fd7b853766f1e1ada3c43b4f3c3a9
SSDEEP

3072:av27925ip8D8sX8ecGPi1iLE2tyjn+9Vu:iU9j8D8F3GLLE2tyjn+nu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d99ca0960df5baea6926c8bc1411210e_JaffaCakes118

Files

d99ca0960df5baea6926c8bc1411210e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ