0d3b61d6e139241aad7c325eb83c86be_JaffaCakes118 | Triage

Sharing

General

Target

0d3b61d6e139241aad7c325eb83c86be_JaffaCakes118
Size

13KB
MD5

0d3b61d6e139241aad7c325eb83c86be
SHA1

8c4608cf3e47a493e5d4011c2ce94b8c8bb0d945
SHA256

6a842d6f30b1e74dc7930f57f23436dadb9d1135671dbb1ea43bf2e750892678
SHA512

4949ef1466b157613ecec6c1ad0449113cb21c55417ecf7d337a3f2a5bc81cc6fce24c48be2912b8d532bea917b5de5864e55e3a42c01a26360d2f402e612110
SSDEEP

192:ob9xIjjw/U0Yp0WU/fuPpQlbQ5LboAUDkUVTy+ngYBOAsNo6ZiXohe9s4x:ob9+nwHXTkmfPgYBOAsNZi5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d3b61d6e139241aad7c325eb83c86be_JaffaCakes118

Files

0d3b61d6e139241aad7c325eb83c86be_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ