0d18efb52a47eddcbdad783256703af4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d18efb52a47eddcbdad783256703af4_JaffaCakes118
Size

41KB
MD5

0d18efb52a47eddcbdad783256703af4
SHA1

314a4063d55f05a72c4a51fdc59752053fad1988
SHA256

ec84340259779015dac2a05551564b492b1361fdb6ea1868a42661e3ec531e39
SHA512

89f7af50756bf5677fad2be8bf98a0604036d4c174d08abf934c4c30590a5d9dc674c9d70f57a9dd9830628240a4e7fc4d2ac14330480a94b82c300b279a55a1
SSDEEP

768:QHVupU/jr5CEsxv0GEJWp1ojS4RNc1APIfFFYu+t63Z:Q8U/JqMzOoGUNc1NfFFF+t63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d18efb52a47eddcbdad783256703af4_JaffaCakes118

Files

0d18efb52a47eddcbdad783256703af4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 25KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ