de6c13166eac7f0929e1aa1082b61433_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de6c13166eac7f0929e1aa1082b61433_JaffaCakes118
Size

943KB
MD5

de6c13166eac7f0929e1aa1082b61433
SHA1

a07b4d558bc61216f59354f3f053735144627b86
SHA256

9b69935c5b6a080ab66bc1425ebd8473212a7263b95887562804057e353d89ff
SHA512

0d210bbf20f5290a00466cbdec279ab908651ce2454d3a2511082be848f0859d03bd707531582be2e94f3f03bf06cdc57faf7a36a76393ecd63d80301f6ec35f
SSDEEP

24576:kJeJfANPkjp98zHpieT4Lxy69eGOxmKoc7LbvX:GeJfAQGpLULxygeGOxmzc73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de6c13166eac7f0929e1aa1082b61433_JaffaCakes118

Files

de6c13166eac7f0929e1aa1082b61433_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE