f1401c0e1d4aed5076cbec6142f16d95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1401c0e1d4aed5076cbec6142f16d95_JaffaCakes118
Size

82KB
MD5

f1401c0e1d4aed5076cbec6142f16d95
SHA1

169b2ab14f81cec56959f2d3d21898022dff1d74
SHA256

2efcadca601b8434a612173377396a02326222d7b4cb81205cb9fd19ca172e00
SHA512

d5cd55eed609e2c08013c9ffc02551c7dd92e844c62879d4ec0bb82ce5abd3424c6b60812ccd1b9c3f70693a4a55484b627cc8c94be6ed8997d3aa78c605da14
SSDEEP

1536:fEsbOnf75W4dfkeEaeBOlBjDuodEjh3MEn3yUYiWnDlgUZ:fTCD5W4Vk3HBOlBjt+3F+iKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1401c0e1d4aed5076cbec6142f16d95_JaffaCakes118

Files

f1401c0e1d4aed5076cbec6142f16d95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ