f123b580c1e8c501af739043e1b448a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f123b580c1e8c501af739043e1b448a6_JaffaCakes118
Size

385KB
MD5

f123b580c1e8c501af739043e1b448a6
SHA1

1f230616b125f577e3f36f7dfe83d3dc4982172d
SHA256

e12d50c23fd0e5c6bfd87ca5530a1f8fea66ba22c8b76670f0cdd7e8e5e41629
SHA512

12e509b69d807ae43f8b1c37b63e3caa3e24ed5e39f28430413684929e11abc0a08978e8165915a5e891c4e4e86a112df90f0885cb7becd6b21378e89c4869b7
SSDEEP

6144:E9JP8aMbCjkoQ+9rlSi8pFFV+AcjivSprlfIkdULhhvT/TINyT3B:E9JYCuY8pfV+TfprlgkCvvTrINyTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f123b580c1e8c501af739043e1b448a6_JaffaCakes118

Files

f123b580c1e8c501af739043e1b448a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ