de96d8527c677c42f43f5a45c7d0ee8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de96d8527c677c42f43f5a45c7d0ee8c_JaffaCakes118
Size

752KB
MD5

de96d8527c677c42f43f5a45c7d0ee8c
SHA1

7ed1d4992c8cb05d8ae0e2155c94fe31f181943c
SHA256

8449343a4d037512cdbca6a7b513693be9a75d9de674408d55112f3b6fad1534
SHA512

451522188f2b872fbdefae58592d22e4c3d34e128d9c316f9339cfd2e767b37f627298d8e9b87f47552f6c43c79f7457b9632a8ae1ef5727d02ed878bcde49ab
SSDEEP

12288:0RObekMtkfohrPUs37uzHnA6zg5cIsalHERjUrNN/RQ9wgUT5LjDExyc:mObekYkfohrP337uzHnA6cHswHE/6gUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de96d8527c677c42f43f5a45c7d0ee8c_JaffaCakes118

Files

de96d8527c677c42f43f5a45c7d0ee8c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8B - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ