422ae04ddfa9afae3338f0fe29e05c13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422ae04ddfa9afae3338f0fe29e05c13_JaffaCakes118
Size

145KB
MD5

422ae04ddfa9afae3338f0fe29e05c13
SHA1

7b83cdec367ad0d485a5d1957c7541fb73e14680
SHA256

7201ba7b6b2c9ad6f3f27859f307c0dff4e50b9d3d67a4eb2a4b8bc14794084f
SHA512

b135cc7dc1be2cf2fc5ebf91fc0686a47f3be2fb986e15ada7b6d62282333a9c6b787918b0c8c8b8e25014da8e8e31fb8dc4ea09f54ea5661d6580617dc1b2e5
SSDEEP

3072:FZnDVT4Rzz6fF1HalUBRilABQxDHo02YwNXoYd9LlYM:rVMRn2cljlSQxDHouwNXoYXLlYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422ae04ddfa9afae3338f0fe29e05c13_JaffaCakes118

Files

422ae04ddfa9afae3338f0fe29e05c13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ