11dccc9b52b21ecc968a31069938448f_JaffaCakes118 | Triage

Sharing

General

Target

11dccc9b52b21ecc968a31069938448f_JaffaCakes118
Size

44KB
MD5

11dccc9b52b21ecc968a31069938448f
SHA1

532d1ce19ec54993834eb3da7032d86552c58b26
SHA256

64319a0b488f8e99444df268af8f29b197790aa0f6a770b97c4627133ae72ac6
SHA512

0b5aaae421573e38f2f4d345e25f11e346833cc22e9ca3d4b443e93875f45e29e5e51c06d45369a8a70175c278f50a7d53117b600a7af533bbb093edb340148a
SSDEEP

768:BMIOX+e7eLfFz3mQx4VLigO+c/9Bygtx:WIOXYOKD7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11dccc9b52b21ecc968a31069938448f_JaffaCakes118

Files

11dccc9b52b21ecc968a31069938448f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: 7KB - Virtual size: 7KB

.idata
Size: 626B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 420B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE