12ad6e1693d8ea7525775141f04a8fc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ad6e1693d8ea7525775141f04a8fc0_JaffaCakes118
Size

504KB
MD5

12ad6e1693d8ea7525775141f04a8fc0
SHA1

85a32bbeb98e7194e7097d15b910e1d8fa09301a
SHA256

a45e40389fcac225d2bfcdbae1bfaa230d2b71e2f9055a14656bd89d838ecc8a
SHA512

08da5289ecc8d72bcc1c748781538181a9e17b8302e3e8e5c49e0ec023923e0c13d2566783d3aca4a3f8dc7d032a77d6baed2a7b1fdbd929183db90279f74b51
SSDEEP

6144:90v4sIND/AB4jYWoyGN2Ik5AfPjFWFNAy/7+dOYG+/WiYO6be:aABhABEXotkI0A8AyzKOc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ad6e1693d8ea7525775141f04a8fc0_JaffaCakes118

Files

12ad6e1693d8ea7525775141f04a8fc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE