3af22a5c5a8d8e4391e7e71b9e890ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3af22a5c5a8d8e4391e7e71b9e890ef9_JaffaCakes118
Size

91KB
MD5

3af22a5c5a8d8e4391e7e71b9e890ef9
SHA1

2a93c905f63169e51a66779f56b4070ba0256b18
SHA256

bc57b4308b6f4c47db7dfa97c5f4fe473a3a3e1c9e4a267eb5f3fa65096ed495
SHA512

87fbca4c74981049cd9ed29910c84ae599ba6671663961e7e71b019fa7e697c8414bfb6e05a4738ae317cfdbf24b12c6df1f3514464151b629329c613e94a805
SSDEEP

1536:s3eLQnk+1jlkCI1A+vhUBOhwWiiksVZjGSEUwrgIQPg9:hsky+1A+vhUMNibqRGSvQzUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af22a5c5a8d8e4391e7e71b9e890ef9_JaffaCakes118

Files

3af22a5c5a8d8e4391e7e71b9e890ef9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ