e864a0cf197c176f30e8e5b67c80aba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e864a0cf197c176f30e8e5b67c80aba4_JaffaCakes118
Size

385KB
MD5

e864a0cf197c176f30e8e5b67c80aba4
SHA1

5cae4a97d0dcfe52badeb294e5ebb9373bb5d63e
SHA256

d9c4a900e303f44f3cfd3c6569d4210f81b64dcac7fb2b7f57e9b75f98f8c3ba
SHA512

1b2eef875e96d14b5ee77ddab5ca417de2c8a4a770d7add28e68a705d0effd39fb6f80734c0b63463918b7b0886a1c9ed966130201a6ec9f080aef72f66bccac
SSDEEP

6144:xXUPbzbrLyxLAey9ItD7TWR2OHNGj9NWWdbgGDennl6tSPtdfP8ixB:xkH4LAer1TGMlxgmSoCtd8ixB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e864a0cf197c176f30e8e5b67c80aba4_JaffaCakes118

Files

e864a0cf197c176f30e8e5b67c80aba4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ