37971badf9d1ab1b49c491a96d228fe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37971badf9d1ab1b49c491a96d228fe8_JaffaCakes118
Size

88KB
MD5

37971badf9d1ab1b49c491a96d228fe8
SHA1

f2b46b603e6a94f3a4fc4320dad800cb88e403c7
SHA256

74564b027a8a3b12b00d4b2b404827bab2e06565955170c0b59264bb4d74d17e
SHA512

c7c9c3be4cdbed2b17b4fbf2cb98b43e3755480d0815cbc049b50fac79d649acc04568b8e348055ccb6198bcd492abe2da1f72a3b64b9f726c928ae909c9c7b9
SSDEEP

1536:/0HCkI9DINXpzo2IrjknW/CPIvICuxczMb70yJ0nCm:MpIDINXpuN/CPIQVxcokA0Cm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37971badf9d1ab1b49c491a96d228fe8_JaffaCakes118

Files

37971badf9d1ab1b49c491a96d228fe8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ