3af76abfc3299bcf2baae90c67250fc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3af76abfc3299bcf2baae90c67250fc0_JaffaCakes118
Size

67KB
MD5

3af76abfc3299bcf2baae90c67250fc0
SHA1

73bcfbaf7b03cca6b496d07a4f304a1ef2aee8bb
SHA256

a1505715d411190f07f11080d86b00c6c48f6f80e277424cbbbce41b8cc73b65
SHA512

6270035e2a3696f5e8225399c6a424bc1c15f654794d5ebfdd7e23da4f0e7480b406cf6dd5054687d111784792813c2081b99013ca8c758297240caa7ce020af
SSDEEP

1536:A2F+I6QwjmPk2e3Kol4VP7uSOqd20PGxFKyf17b:dCJ3KomVPSLO20O/Kyft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af76abfc3299bcf2baae90c67250fc0_JaffaCakes118

Files

3af76abfc3299bcf2baae90c67250fc0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ