f0e24e8d00c409902923e56ff1931cd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0e24e8d00c409902923e56ff1931cd2_JaffaCakes118
Size

271KB
MD5

f0e24e8d00c409902923e56ff1931cd2
SHA1

66f096ad43fd5225e1c31585420fe9f7d2d77fc8
SHA256

c92e5789eeb584acaa2a0421056071204891322c701539a7da4ad39d2d26c45e
SHA512

bed7e632a28fcedb237b869802e440b6dcba371434bd08fa28c583c41d143395ca74c8b4258a2fa885b2e28a9f60fb73d0fbf95c66aecc92a82517d91b70d2b7
SSDEEP

6144:q+FNvDu5NMsd+mF9gNMrhsgRx2aHNs8DtD1SpUx8:lFxDAdMmF94KZJ+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0e24e8d00c409902923e56ff1931cd2_JaffaCakes118

Files

f0e24e8d00c409902923e56ff1931cd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.data
Size: 1024B - Virtual size: 996KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE