da87d4e41c04dbe44369d107e5e59048_JaffaCakes118 | Triage

Sharing

General

Target

da87d4e41c04dbe44369d107e5e59048_JaffaCakes118
Size

746KB
MD5

da87d4e41c04dbe44369d107e5e59048
SHA1

1abd0fd26261fb6d5b73979cae8794f3a1ab571f
SHA256

4f76f458e28aed9d58ea850baab760b17b3582b476498a3d4b15d7777d9102c1
SHA512

e1c9d649361bbdb978be947ec8fd9eed12f1ebf7b8afccd623e2dd91345cfa815c1fa6e26428f59b04878cb6999756110980b6d20cf79a7f709b76fb4ccd6f1f
SSDEEP

12288:5na9yigkpjNrhqhoWQ6DkvjwXh+f6JM8+CCFHdVe/j9N/tcvS38LCJQBtdGs1rBw:5na0INrhqG6DkUMf6tOdVebVkS3rJQBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da87d4e41c04dbe44369d107e5e59048_JaffaCakes118

Files

da87d4e41c04dbe44369d107e5e59048_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ