f0fdfba8fcb10a679156b654771dda5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0fdfba8fcb10a679156b654771dda5c_JaffaCakes118
Size

82KB
MD5

f0fdfba8fcb10a679156b654771dda5c
SHA1

9097bfbf3f31cc40381e4cf53bdd2fd804ab5fea
SHA256

943e11ca323e18eb321237b89bba1486b7330e6a653c7c070858abc219232c13
SHA512

004b0abe424df78b2e7c2a499ba3313727ba2f03985df48d065ef2031c19eee7c902f92bffc5f1ecbdcafe69d6db3f237eb6314e3c5d3045b3b8a6e1b0e0e13e
SSDEEP

1536:UJO0UxpYyQgBVA9QD0PjPCMXKoc+/09TbQx/Yx8vEH79OT3W1tXYy5hlY:WWxOiB+QaCoT/kTbgAyvEb4eXYy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0fdfba8fcb10a679156b654771dda5c_JaffaCakes118

Files

f0fdfba8fcb10a679156b654771dda5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ