e82926587f58baec1120e9769ea0c6e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e82926587f58baec1120e9769ea0c6e0_JaffaCakes118
Size

221KB
MD5

e82926587f58baec1120e9769ea0c6e0
SHA1

a0f39a1ffc4e655792dd7223143bf86bdc576de2
SHA256

fac8499930ed9c462ee39dc336a43a6eb2ca81f96c005432086ab8e8025c17c0
SHA512

9e01071b633c21d97a7bc1759c62a11feb1a47851db60f9956ce3630894ce8a4a0f79ea47c275528ee8fc08f68c221f23e2277f83f6cfe5d5d18c841626ae37c
SSDEEP

3072:MEsmYEsmEEsmEEsmYEsmEEsmEEsmEEsm7:MZnZtZtZnZtZtZtZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e82926587f58baec1120e9769ea0c6e0_JaffaCakes118

Files

e82926587f58baec1120e9769ea0c6e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE