44f59c678814e3f66d802bbd62db77e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44f59c678814e3f66d802bbd62db77e5_JaffaCakes118
Size

76KB
MD5

44f59c678814e3f66d802bbd62db77e5
SHA1

835d78a4b3ee17d487ec3f6e264c2a89714a5caa
SHA256

7ed11a2f0396768e2c2ea7734544efbd0a6a05c2aa5e4557503372cb4e790dea
SHA512

ef869ef25164403f6bf637ed1933809080987e53388e6c28629db40c907df79dc4ae5170abf588e2150f967e1789820dc692127ad05decf365e35d6583a8e4a7
SSDEEP

1536:jjRBLypAx3k6Zk8eBBEZf/hwLPQL4Imetf9cDjDkP:PJKBBEZx0P+v1tfMjoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f59c678814e3f66d802bbd62db77e5_JaffaCakes118

Files

44f59c678814e3f66d802bbd62db77e5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ