006775f79f180095aca10a5c5dabf53b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

006775f79f180095aca10a5c5dabf53b_JaffaCakes118
Size

688KB
MD5

006775f79f180095aca10a5c5dabf53b
SHA1

1a4c6af43c463f7b5ada31ee794b45a879e42bfd
SHA256

6855248f4534255b98358b770e37a55a002d602c7c9bae093bc55cb70647da66
SHA512

1030ada8a62c841b517631e18ecced9794e9b504efe6322f45dab7f8547e6da4dcda50a014675af68b4ec8fa0ef73be048aee924df3302ef52be49da30e5ce4c
SSDEEP

768:Op3zxJTqpdet5TwU/cLVyvW8FuVgwvQt5Wyyat4mfzKUWYt:+rTSde4TguVgwvVuVzbWYt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006775f79f180095aca10a5c5dabf53b_JaffaCakes118

Files

006775f79f180095aca10a5c5dabf53b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 644KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ