097d48e2694f99112774d2356fd40640_JaffaCakes118 | Triage

Sharing

General

Target

097d48e2694f99112774d2356fd40640_JaffaCakes118
Size

904KB
MD5

097d48e2694f99112774d2356fd40640
SHA1

0b721d6f832c37342c70cc9a8c76981f148d6ec5
SHA256

ab1b25c510ca582342856a9ff9efc498a13c8cc81e369b852bb98cb30cb15d2b
SHA512

1a209a771b75e494881f8583b39b19d8768b3a4fb3ced383457e516be650184e2c4d3bf032cb6c9ea8daa2fcc8130e662c62585218d0c8bb586d050ed5b87a05
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqhWe:hWtTBdsqEPxjjoFzzWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
097d48e2694f99112774d2356fd40640_JaffaCakes118

Files

097d48e2694f99112774d2356fd40640_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ