f170249ec1b2bea833b5b76df4094575_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f170249ec1b2bea833b5b76df4094575_JaffaCakes118
Size

506KB
MD5

f170249ec1b2bea833b5b76df4094575
SHA1

592155ca74e49e34e641b249be45fbfbb7da9f18
SHA256

2d882814ce9a8bff409a3bf9a5442029cf8b538a14757b519e9ce183ea3f3bd6
SHA512

fcce8809ca5e7d39a3d5fe7c9197553aee64b0fbe93f69383be36253d8348a3021e93ecc5c0e2e46e47932b8e974902e211b2f02f3a5e89cf80ec8082832ba09
SSDEEP

12288:zXtA6fJv6V8dYJBzsDZ+HXvVolDWroQZsis3l0/1tC0UIqEMHrU/oNYk8Cl7G/qT:GKJv6V82JBzsDZ+HXvVolQoQZsis1m1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f170249ec1b2bea833b5b76df4094575_JaffaCakes118

Files

f170249ec1b2bea833b5b76df4094575_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ