e167d4df0efd68225050b00c42faf7a5_JaffaCakes118 | Triage

Sharing

General

Target

e167d4df0efd68225050b00c42faf7a5_JaffaCakes118
Size

8KB
MD5

e167d4df0efd68225050b00c42faf7a5
SHA1

c132f60f4ac20c53226d5115fcd400161fed8a35
SHA256

2d1db07c6da7d7f24be0f9ebb6a02dfa0e3fa4d80f1408fa8f821ffe08a475a0
SHA512

cd2939178d0a8b456b1749505bfd57824dd27b4192646c26991c528cbe3ec860ba9e1a589eca4b3f14b9673348adafaa1f3059021801b627a80725b4c12a12d1
SSDEEP

192:f3Y6uyvvIF0KZ0wdJjuRP7zC2AyHcOD03u8IQn5AvDa8EO+CZb:f3YXyvvI2vwjjyAyHcP32t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e167d4df0efd68225050b00c42faf7a5_JaffaCakes118

Files

e167d4df0efd68225050b00c42faf7a5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 660KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ