f20139e825390ab7ef7b7290249b1a4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f20139e825390ab7ef7b7290249b1a4c_JaffaCakes118
Size

82KB
MD5

f20139e825390ab7ef7b7290249b1a4c
SHA1

18a07ed6d92a2ff552c9b4da6c33aef36e7b6299
SHA256

6f388ca56ea0ae0332ef017a491d980b92c58b78983aaeb7a6348208e2fb71f6
SHA512

ac9370c383484ff573202e1274d9bf1df4ef22c7f6ba10c2000c57f3066a0abd1cd5a091a1d4cf00ba92705d70d4c4572d35f51a98c4a1c5d2dd9360252a7b4b
SSDEEP

1536:RErZwBYxjX0isZWOdEe3SSSMQ0s69VVHvvaZI7h5s37AUgCCV3c/DIQNv:yuYxjkisY7e3SSSMXDVPvx7hy3DgCOsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f20139e825390ab7ef7b7290249b1a4c_JaffaCakes118

Files

f20139e825390ab7ef7b7290249b1a4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ