f1ea2e71e0436a748bd0a7425ef82a17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1ea2e71e0436a748bd0a7425ef82a17_JaffaCakes118
Size

385KB
MD5

f1ea2e71e0436a748bd0a7425ef82a17
SHA1

8db8df547160a43861b7dfe8460994a4a713f67a
SHA256

7158c79b59c25355e99415387f740403866c6db3f8b420a49d1dd82cf0adc863
SHA512

e57f50152b2f63725ecd3c6ba3ccd371063ed95d9c2a9748298c47f6bcbe85b8d690a5d8192317fc489bf6e1d772358962625e6e2eb6daa832f95be27a14bb52
SSDEEP

6144:ATF0tiFuhllLbCulSoVDp/vKDDs4SqBfxSvFTbbiwGVZ2DCDWFVry9B:AdQhvLd7FKDbS+fx4THY21FV+9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1ea2e71e0436a748bd0a7425ef82a17_JaffaCakes118

Files

f1ea2e71e0436a748bd0a7425ef82a17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ