e1659a6be7871cf28d1a767b95951bad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1659a6be7871cf28d1a767b95951bad_JaffaCakes118
Size

42KB
MD5

e1659a6be7871cf28d1a767b95951bad
SHA1

dedd997ed4bbac57aa90278c55cd1af65453b607
SHA256

18c2e815eeb4345d0a5ea5b65cdd3a0270db9d5b5c4a4648521624418c941082
SHA512

fa6a2e51c5bb7075a892c0e57ab4110f1a1970541e98870eaeda98acd385084aa76bca0a18ec968f7d2183985608cb572a5c29379deb3feef4f9f7e58b2e2433
SSDEEP

768:Hjxa8BhMmyp3ISAEWhdcxZ696kx0FGzH5PJNPPhjQn3JxNfHhwWkYZ2VQL4OGqj:HjzBLypAx3k6Yk8eBBEZf/hwLPQL4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1659a6be7871cf28d1a767b95951bad_JaffaCakes118

Files

e1659a6be7871cf28d1a767b95951bad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ