f1294e8f8ed3652b847459b28c71275a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1294e8f8ed3652b847459b28c71275a_JaffaCakes118
Size

385KB
MD5

f1294e8f8ed3652b847459b28c71275a
SHA1

4e5c6846714b62223c30fce0b45e0f1a95138856
SHA256

b8908a0f3fa022c087c37ad5cf60db8c3cb6e6d1a0074df951448098e9881e6b
SHA512

66c006cd382d789462aeb84302ed25fc99aeee7d79c0f3f5702a6756d0979d40ab4ef6b2285d88c231d521d69b58e80a13b60f6d8e0c8368d680822052e7f063
SSDEEP

6144:PdT1fxS7Vhz3ig83FMrh4VM66p5zGMrg831qbMbSNNed3aUDrSfujrB:1RfxSviDM14VEpkMh314MbB3aFujrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1294e8f8ed3652b847459b28c71275a_JaffaCakes118

Files

f1294e8f8ed3652b847459b28c71275a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ