f13192abcfdafba4853ae1a16d685332_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f13192abcfdafba4853ae1a16d685332_JaffaCakes118
Size

506KB
MD5

f13192abcfdafba4853ae1a16d685332
SHA1

d8dbe63fa027e9ecb1262df96d247b91f3375744
SHA256

c7b5374f41d3973197758fa4ddf786405d96d30795d631a2b4a8cf82bd912da6
SHA512

65f6db5d200b49ea0b2ee4ff7fe5e2579b5f3ebab28d9d5a19afc51232b8cb50cca04a7e7b1117ba03b33d1182f7d98f8a79c5bac69103cc681f0a9a1b5358b6
SSDEEP

12288:OtmHU4xARIDJwHHPyKITePbvRJBFOGmp58phRHnDk0WoBvgqRmmmjvnKa1VkNdtC:n5DJSawWr6hcPYKjBEF30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f13192abcfdafba4853ae1a16d685332_JaffaCakes118

Files

f13192abcfdafba4853ae1a16d685332_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ