f259a1471a9f3b9c3c83ef7eb3220ad9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f259a1471a9f3b9c3c83ef7eb3220ad9_JaffaCakes118
Size

385KB
MD5

f259a1471a9f3b9c3c83ef7eb3220ad9
SHA1

5bbc583bbca502b315e1a56b7534d9bc06955647
SHA256

4e9e759479958c60d6992c1f30c57f25644db665de53c4c152ef07ac57ed5fa3
SHA512

3e2615fb58a089b588f06d47c38e3170a57f1fe0e11b8495dc66bdda06fb2049fa05e34aed2c2d795fa6166f5ae9cc2ddd9592f7f4f325ca8e6fe8285e4d6b65
SSDEEP

6144:sU201U4TXPpZbzZsugSgC6OtRxq+AMEIcD8//PTBZsnFFXt2GiB:sU0WRM1rVOWMExWLDs38GiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f259a1471a9f3b9c3c83ef7eb3220ad9_JaffaCakes118

Files

f259a1471a9f3b9c3c83ef7eb3220ad9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ