423ade21db7139f17848c26e68aac933_JaffaCakes118 | Triage

Sharing

General

Target

423ade21db7139f17848c26e68aac933_JaffaCakes118
Size

388KB
MD5

423ade21db7139f17848c26e68aac933
SHA1

0ad77e4d18c516fb36455d66bd3f72c9566216ed
SHA256

e8b84eedd38454c1fc4020e22510656d482f4259d54f4e26db776c6853723d3c
SHA512

49da5f6357864b03a7a2a0850b3903987d068fd1765e33a9468e37406851e8903245742804fb0321b15ff5e13b8c2ef645bee6b7e9cc3f85a993f4f9dbd0a7e3
SSDEEP

6144:+IelVE3Ntw02uSauBY8OmuWq9ZETHNj9iXAKJvD9YHBWbb2AiFnZFnrGhB+mxV:+O/w3x9B4muWO47iX9vh5X2hJjrGhDx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423ade21db7139f17848c26e68aac933_JaffaCakes118

Files

423ade21db7139f17848c26e68aac933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Sections

.text
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE