1781afd43ec925a9a7b18e68bfc3b77a_JaffaCakes118 | Triage

Sharing

General

Target

1781afd43ec925a9a7b18e68bfc3b77a_JaffaCakes118
Size

938KB
MD5

1781afd43ec925a9a7b18e68bfc3b77a
SHA1

565718786e328035aaddff3ab6acc6b29bcd5e1a
SHA256

acbab2d25a4a950f6eff0f080572a4703e8570dcc04d465a03922d68bffe84c9
SHA512

4257f9ecb81eb8e43730a598636d90e8d7795a8e6c21eb69ec549d2afa15b3a510c5baa80f641bcd1af7637a8f0e4f08fc0dec1a8d054187bde494737c677b1d
SSDEEP

12288:C67jqNmev57xoPifrPS2g2v6T7gWQZ2cSpCvFDbL:9qNmevAATS/s6gWQZlkCFbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1781afd43ec925a9a7b18e68bfc3b77a_JaffaCakes118

Files

1781afd43ec925a9a7b18e68bfc3b77a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 309KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

diicilx
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxhximl
Size: 4096.0MB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE