f675a0ccf50cb1e1c6c2ecb43384df1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f675a0ccf50cb1e1c6c2ecb43384df1a_JaffaCakes118
Size

6KB
MD5

f675a0ccf50cb1e1c6c2ecb43384df1a
SHA1

150bd7875d2176f48817e557a466adc4bb13ae88
SHA256

d817eb0fbb7586aa15f04867a3379a5203189158a18d21fa5bb488fadcfbc613
SHA512

c041a8882f1b4845d0154dabbdaf78667b970e04a416969d81ad2b917a31d8d4baf65fc5db7c331bf3415b8bfc2e0800d4cc3a9523b6809743578caedcbfa514
SSDEEP

192:uYpTJldyRThHP8ovYJMomgk37IohQG1Z27+T:uYpHUv8rd7c7ISpH2+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f675a0ccf50cb1e1c6c2ecb43384df1a_JaffaCakes118

Files

f675a0ccf50cb1e1c6c2ecb43384df1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ