f542725e68b5ed0ba024d00a2b24e4a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f542725e68b5ed0ba024d00a2b24e4a2_JaffaCakes118
Size

10.4MB
MD5

f542725e68b5ed0ba024d00a2b24e4a2
SHA1

2c92c02704ac7ad87e723762aab6cf3affc4cbca
SHA256

2672bea4cfde6a990b0ba7f43a17f58a28266381a9794fb3e7505ebff48f4fdb
SHA512

2fc2e16ca09ff1606535f14fc67025e9fe1df606f58da93bc11920d04e69f02686804193efa2a03e5666f67ba71e39322771ff34e144707eadfa68e698619ae2
SSDEEP

196608:bfJDdnUgZKo6BjhjJ8WlWrmqgvYpn+z/q8l48Z5RN90EUnZykPZKJ8EzkQsongJ:bf7nHZKx1JnlYSW+W8lmEUu/ICnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f542725e68b5ed0ba024d00a2b24e4a2_JaffaCakes118

Files

f542725e68b5ed0ba024d00a2b24e4a2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ