f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118 | Triage

Sharing

General

Target

f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118
Size

1000KB
MD5

f1da56cf5639def98d6b8649e99e9efe
SHA1

ebb8b26a49f443585151b8f9d04b37ef45762edb
SHA256

20d8e61856aec30adf9c9b7cad3ba66a2487ac0e11e36351be79c1a7ac60644f
SHA512

48f0ee20d5da00262a195735a89648a238a517d764550217be1dfc611f206b99cc35c7110ab43e176c5f02e70b1790b676f8b2b18b0c43fe03486be9c3183784
SSDEEP

24576:BQKGNUVesSWZIRr6Ts+ew1B+5vMiqt0gj2ed:iKGNUVbBx49aqOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118

Files

f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ