e7950e1159472b992265195e2bd4e9da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7950e1159472b992265195e2bd4e9da_JaffaCakes118
Size

96KB
MD5

e7950e1159472b992265195e2bd4e9da
SHA1

c1df85b93378f8cbc59c1447ee04f25e6f66011f
SHA256

e6794bfcaa18635ca2d19ec841d4a392ad03d69d082d9bdee755bad11f94d8f8
SHA512

4186137101021b7f406fb332d984ee0ec19cabc4f1dfd6139a583f15dbad6b74dbb73a29bd32310244bc841be51e85922b7586d631a14218d2a9a9b28912125c
SSDEEP

1536:XqRVZrs2AYjH/vLvb1bhh2rbntxm4n7I6izelv0mDpfNQF+vzUsy3NOlk0orgDLg:X+g2A4nLvJX2fWKTNN7zUxOyqv0NeGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7950e1159472b992265195e2bd4e9da_JaffaCakes118

Files

e7950e1159472b992265195e2bd4e9da_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 639KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 398KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE