e7a54bd82359fd8b186589a08cc7c43c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7a54bd82359fd8b186589a08cc7c43c_JaffaCakes118
Size

453KB
MD5

e7a54bd82359fd8b186589a08cc7c43c
SHA1

5ca3d3e7c6d3711f909672f6426d662488f70744
SHA256

3e1227553132f8b9683a06395680fa90d93215903f7a4da7c81900342ece4325
SHA512

c36a2402a8c4221efce7be445f61454537438f7d56ba74f07a448b40694edb3fefe378af40cfdc7646377e3be5866286c3365fb18dee1e785e063af9ade4185d
SSDEEP

12288:zRCePOkCiw3UHgnPcy4/m73fUkRvj3vYhvpoLW/:z+LiZO0y4/mDfUsA6M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7a54bd82359fd8b186589a08cc7c43c_JaffaCakes118

Files

e7a54bd82359fd8b186589a08cc7c43c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.data
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newimp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE