df921c23e3aae64d958d0cf05ced9191_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df921c23e3aae64d958d0cf05ced9191_JaffaCakes118
Size

75KB
MD5

df921c23e3aae64d958d0cf05ced9191
SHA1

4cc027f80a8f6bfab3080e48a40bceffc0676b5b
SHA256

2fabc75b5144ccf68417fa26e91aea00e7556c70acd1df34690c9b607ffdbdf2
SHA512

fc194f8696dbfa572163db9a0283085d337179a577e9f408ec2223c4f9caad1ddc43a7b7aef5088256c8ca6ae9e22ab4e8e08d51e306c8cf297a46d7ab9f5e62
SSDEEP

1536:Achh0UfBBNpFgzHblvnNtmNxOu/G2zKHOG:xpFgzHbpXmNxOuvKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df921c23e3aae64d958d0cf05ced9191_JaffaCakes118

Files

df921c23e3aae64d958d0cf05ced9191_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ