4462838adb6ef663442920567840be6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4462838adb6ef663442920567840be6d_JaffaCakes118
Size

86KB
MD5

4462838adb6ef663442920567840be6d
SHA1

6587308ff8dd9c4738e80e10d10945276331bc2b
SHA256

705c50e51269672c124841f05943f80bfb4c91431c4260e23e06cff02670b779
SHA512

c83a8c535604a575188e1e1ebe58e8d5a6ecdae1925cceccec7be4d7b38650bb49122dbfd9eee1c024f86188cb2510835d0d8b548cd655c39402d60e09803ab4
SSDEEP

1536:BptGijKvRtAJkl5LZSGrbVhw/tBm1fWOkW6QrSUl:c9PLZSGrnUtk9dkW5rDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4462838adb6ef663442920567840be6d_JaffaCakes118

Files

4462838adb6ef663442920567840be6d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ