f2673afa883760ebdabc5d8eaa6ea9e7_JaffaCakes118 | Triage

Sharing

General

Target

f2673afa883760ebdabc5d8eaa6ea9e7_JaffaCakes118
Size

385KB
MD5

f2673afa883760ebdabc5d8eaa6ea9e7
SHA1

8878ff2dc4ecb8517175a96ee2ce358887deca9e
SHA256

4373aa6bfc8786f53d10d6654b593121d735a6feca6f84e66b892e2c61428482
SHA512

94abb3d20711efd16f598ea35dea85ead4996cb4df520c8aa2804f53eb39aa3330b86f4377bbb5393fa6ae22d647b09531395f113b40d2049eb6aff6923d1dcb
SSDEEP

12288:hluqLWh649mnHBMHQy6TUgc8pebsATkQPB:hluqLWh6A4ur6Ug9GsGkGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2673afa883760ebdabc5d8eaa6ea9e7_JaffaCakes118

Files

f2673afa883760ebdabc5d8eaa6ea9e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ