10103cd611f5675ec8b4895e294a5479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10103cd611f5675ec8b4895e294a5479_JaffaCakes118
Size

57KB
MD5

10103cd611f5675ec8b4895e294a5479
SHA1

a361b92db1661eb2da26c6a5136be060cc2f56ac
SHA256

aa407088a6bd7ea9f2bda814a961669072ce1d84935b50be38499b4e01866e74
SHA512

57007caecac3ab4364fd466acd76397b9bd8e6e5d7531f4abf5762beaea09d339446d202e3413dfd05e2a4b414582fcce46755673e7a54583c9a6a10bdffce3a
SSDEEP

1536:BptGijKvRtAJkl5LZSGrbVhw/tBm1fWOkW6Z:c9PLZSGrnUtk9dkWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10103cd611f5675ec8b4895e294a5479_JaffaCakes118

Files

10103cd611f5675ec8b4895e294a5479_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ