757ca220ae73ec86ef171bbe284835aa_JaffaCakes118 | Triage

Sharing

General

Target

757ca220ae73ec86ef171bbe284835aa_JaffaCakes118
Size

609KB
MD5

757ca220ae73ec86ef171bbe284835aa
SHA1

ab561661678c1a78507461b9b0f79af5a757b03d
SHA256

4ed7dc9a5a1abea83e44e8a43d7aa9f81a7ff551e0323eba7ae2f5ce1d5ca119
SHA512

8da2379ef38c5c698c4a805470a393d89b23c85d430a900c83197e91bc7327f884632bb0ec82b72d8c19718020b2071b2b5f56cb68ec453d74f009d62e5b1b8f
SSDEEP

12288:e3TdtLW5WIj1YSSdFxBvBSXyMzBUWb9lx/9AgHLo8OW+rB:oDsj1dEBBcJ9nPx/igrp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
757ca220ae73ec86ef171bbe284835aa_JaffaCakes118

Files

757ca220ae73ec86ef171bbe284835aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 308KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE