081b5ddd9b75eb1df6620db12ec15075_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

081b5ddd9b75eb1df6620db12ec15075_JaffaCakes118
Size

211KB
MD5

081b5ddd9b75eb1df6620db12ec15075
SHA1

195260f69d9e97040c87f7fb6110cc74fd38b51f
SHA256

6a73286094f39f471ca86fc6569871ac6c00bac9e63da9dc4ca51620e821fc52
SHA512

356154b6441fce162aa9981daa815b642bbac78808e611bc17ff4b6fbe57e10a20068381c4e971da42114cb4ac347089131156da7f78edcfc118ea6ceba0e167
SSDEEP

6144:/2mN26PtA7NI3ArUtiSBVm8Tww1r0G2YwrGcL6MZ5tcY:e80ISEPx6GcL6MZ5tcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081b5ddd9b75eb1df6620db12ec15075_JaffaCakes118

Files

081b5ddd9b75eb1df6620db12ec15075_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 554KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ