179e461c54082bfb5461246f6a5d2149_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179e461c54082bfb5461246f6a5d2149_JaffaCakes118
Size

185KB
MD5

179e461c54082bfb5461246f6a5d2149
SHA1

42718b2274f56a4599b823f4949d8025e8bb28bb
SHA256

61f8e9d0528891e1b03b87ec967873f5e4632b7331843c7d34ec0ec20e3e4741
SHA512

0be18748cab9352703cea348c51fdfb4df42e4e5be171fd63e2a344d47fd5e9a13b2314fc491b454f2a3fddc48ffeed2ff88ebace25ca81da6f362e414e04960
SSDEEP

3072:XYhAmQznAuutWZR0GvaVPl3JxY9WiaDe2Ejxd+pTOEzW7N4dYrC27Fp18Hpsd8G0:XYhAKF8aGeJxYQNe3jYqE0N4R2NsCuFZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179e461c54082bfb5461246f6a5d2149_JaffaCakes118

Files

179e461c54082bfb5461246f6a5d2149_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mstinit.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE