413acc096baa3b598174f0ec4b63ed92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

413acc096baa3b598174f0ec4b63ed92_JaffaCakes118
Size

70KB
MD5

413acc096baa3b598174f0ec4b63ed92
SHA1

1deb7d645ba3490b20f8d91d99ab863942dcc73b
SHA256

707b842ff0c6f9a16afc10ce612cadb88fa72712980d6c5666da47da29d8d7e1
SHA512

7edc8ea00fd4ec60307c0ed93e10c5172683bd3967b50703db7f1e2bd5f9866aae0e7793da416a19519af07c5a83024d42c7a229919aaa6558173ff636ca5e4e
SSDEEP

1536:E17kkDqOmRFhPnW81tZJsKdfnopql7NiQ:E0OmRFhPnW81HqKdfnoMtNiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
413acc096baa3b598174f0ec4b63ed92_JaffaCakes118

Files

413acc096baa3b598174f0ec4b63ed92_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ