432fa6d13adef615813cea340115ddab_JaffaCakes118 | Triage

Sharing

General

Target

432fa6d13adef615813cea340115ddab_JaffaCakes118
Size

1KB
MD5

432fa6d13adef615813cea340115ddab
SHA1

f656b07577fb0d31ed1f3b665a48f2c3b99a2241
SHA256

7f29d855b7ad8563bd87fa671c86dd8c34199044600789ca9133947ecb949548
SHA512

3ddd9ac2b5a4fb2488622b9b8316136d6a8719a4e16458ed8b6f0649871dc8ec761b5188e0a1b0cab14200c86c64635c90619c63c5e700762a83c1ed1e4ba04a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
432fa6d13adef615813cea340115ddab_JaffaCakes118

Files

432fa6d13adef615813cea340115ddab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ