f0728b130df8e65a543d2e9350374fe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0728b130df8e65a543d2e9350374fe8_JaffaCakes118
Size

111KB
MD5

f0728b130df8e65a543d2e9350374fe8
SHA1

472f491c05e715fde6891fb7f128db58d4557054
SHA256

37db153e0ae8aa59420c4d2797a8fd1ac5a0ba19ed60a73be99552663cbe5a8c
SHA512

d823fd42d957fcaa4d24e4824e113df13ee589c3e596270bbdb8646659cf12a29a07935f65f2e12f25ef7836bf39820f87cdb978744de985a36b0e2a83bc7b72
SSDEEP

3072:1dw941TQXWV/gdromHSn6koISXjpIXfAP3s7Kzv9jsu3sO3eeI5:64TQd1HWJoRk7Kzv9jH33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0728b130df8e65a543d2e9350374fe8_JaffaCakes118

Files

f0728b130df8e65a543d2e9350374fe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ