177fb9ad7e00e5e009bfe1f628910d08_JaffaCakes118 | Triage

Sharing

General

Target

177fb9ad7e00e5e009bfe1f628910d08_JaffaCakes118
Size

904KB
MD5

177fb9ad7e00e5e009bfe1f628910d08
SHA1

b181634dc7681fc51d886262388a2e3f7a673997
SHA256

74d1a16175fbf39fb1b3aef796bba5da558f6c6f1c530721e686c503ee11fe05
SHA512

3066f4935e8f0cc35f3dcac2c4c1d817a84f8bd30e904f492670a319a2cce4dc5e5ccb9cbc94eaa86e40281861284cb1c5a70667c77b0f776b9657b990198933
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqr:hWtTBdsqEPxjjoFzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177fb9ad7e00e5e009bfe1f628910d08_JaffaCakes118

Files

177fb9ad7e00e5e009bfe1f628910d08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ