4152df7e8e88934f1e910ae4cbdcf4c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4152df7e8e88934f1e910ae4cbdcf4c5_JaffaCakes118
Size

615KB
MD5

4152df7e8e88934f1e910ae4cbdcf4c5
SHA1

db153f71c59b5b5fdf77c5ff795bd236ac7d8a6a
SHA256

49b82e0b85907b775d32d0458bdfb4d7431d0dd388da740e814d8206571c6d98
SHA512

f70f19de13d5027316520b91d9238372648e6f614a456ab059540cbc309c55eb064ed91a96e21ce57867982a82b710f2e6bb1c3df9b2e19cac25e45964197fb7
SSDEEP

12288:oyMJfsGklLJE1Xu6eRHqmzen+RWswYcNDFyfmYVmsiUlJx7gV:oyMJfsjld4ejiiW/vBnYVbiKk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4152df7e8e88934f1e910ae4cbdcf4c5_JaffaCakes118

Files

4152df7e8e88934f1e910ae4cbdcf4c5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ