11eb0c28e158dbd7bb01deaa09ff4cff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11eb0c28e158dbd7bb01deaa09ff4cff_JaffaCakes118
Size

865KB
MD5

11eb0c28e158dbd7bb01deaa09ff4cff
SHA1

0fafac580016017493316f1489feaab43443cfdf
SHA256

019a91a919fbdc136ceaa013d392d3f5020bf91d0227bdc67260f393568d0188
SHA512

bdb50940e617ad537d3ae034cc107843cae7a24131f858457afe456eca47b935a6ba9dc7dc1d572bc1a4fd27e90ff3c4f4b94912958f1181438c749f685ddac1
SSDEEP

24576:YVcS8pWAa7MvyGWfRRd8AeE4bBbZO7s174:YVUp/a4yGWB8AvgbB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11eb0c28e158dbd7bb01deaa09ff4cff_JaffaCakes118

Files

11eb0c28e158dbd7bb01deaa09ff4cff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 845KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 408B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ