13d44e68bb9a52af53f0397a5dbf2259_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13d44e68bb9a52af53f0397a5dbf2259_JaffaCakes118
Size

308KB
MD5

13d44e68bb9a52af53f0397a5dbf2259
SHA1

5f3bf562e201482fc7af890ff8a9fe17abc474e7
SHA256

c63c683700c4fa5d8edbf97d10066840199f13ebdb2e701031303c15f3a65f41
SHA512

ef88ec873a36d266fd1587afadc200d19b8bd9e0ef47f15b2a3e81a157c2d963abb0000db7990cef600cb0df661ba3bccfb26ca41f4c3cf7c861d55b20e23165
SSDEEP

6144:cdYgxDLgYxMluzMm2mBiXS6S9JSelDyX2UFLstcAyXRU0ODDom:tgxDLmuLTKSH9flD74sK60ODDom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d44e68bb9a52af53f0397a5dbf2259_JaffaCakes118

Files

13d44e68bb9a52af53f0397a5dbf2259_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ