101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118 | Triage

Sharing

General

Target

101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118
Size

125KB
MD5

101a815d542d212a315b3ca36f2ab7e7
SHA1

7179f0249039f1706497ef3715483f35924b9398
SHA256

cfb7af75a76f0962c0682e99f9ff00f029a218563bbfde1ab90d095c80c70c31
SHA512

9e9053f8fc5af093338ae95798798217af5eddd888c5297c1fe35add37cab600f659bedac58dca667da569b88003522b3d85ff2304ccaa73cd32148332ecc676
SSDEEP

3072:0ckAxaE6jCSPYqZh4+aPl7bkbIkkUIkbIM:1kmakLqjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118

Files

101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 91KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ