f01b9b83fd052c246e26545bea0becc3_JaffaCakes118 | Triage

Sharing

General

Target

f01b9b83fd052c246e26545bea0becc3_JaffaCakes118
Size

772KB
MD5

f01b9b83fd052c246e26545bea0becc3
SHA1

f42a3e5bb2df23ba18144439cd7edbe24b31bb83
SHA256

894bd21bd80f13e045fb58754eb51ea21997d42f3261ccb6d469b3db0fa2c44c
SHA512

2923f1583bc181e44624d2c1bf24399c96f020ecf0d24205a3adec1bcdab508699d3aa1ac5bb73ac2fa630721e7527060f4e69688368c5845732115f5403f75b
SSDEEP

24576:4np7EoT+anu50jABxwCWK4+kyoYT+3/sef/qc:4p75TBABxNzkyoO+Ps6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01b9b83fd052c246e26545bea0becc3_JaffaCakes118

Files

f01b9b83fd052c246e26545bea0becc3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 2KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3fagi2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1avqcv
Size: - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 3.0MB

.engine
Size: - Virtual size: 460KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 712KB - Virtual size: 716KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE