416c2f1cf116d50fb0a4785935ee5187_JaffaCakes118 | Triage

Sharing

General

Target

416c2f1cf116d50fb0a4785935ee5187_JaffaCakes118
Size

601KB
MD5

416c2f1cf116d50fb0a4785935ee5187
SHA1

0361bfefe6958faea7281265b8a473488a43b835
SHA256

1e682551f2ec784c00a8baa82e26c7b2671fb805fe696a8faa3009554e5e5de3
SHA512

0eab0585b42aaea790ec98d758710c65c23cf6c1e1292dc51ae129535a048dcd870f1b269b9000b99ed23ccac1b9856fa00b6a13d9291943a74eca4c3b857122
SSDEEP

12288:dLMJfsGcfz4M+8CKu8RYzrmY6b4UZ3JlaGxIMWG548SkdmW2Zxgn83A:BMJfsDcM+8yVrmXb7JFb5JVx2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416c2f1cf116d50fb0a4785935ee5187_JaffaCakes118

Files

416c2f1cf116d50fb0a4785935ee5187_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ