f2cca36e46573d7bb269a30086a6e093_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2cca36e46573d7bb269a30086a6e093_JaffaCakes118
Size

31KB
MD5

f2cca36e46573d7bb269a30086a6e093
SHA1

67ed60ef1ccba5fe752bcd6e77f40030662cd2c7
SHA256

a44e16d79235a7aa7b515870bc0336bf79755bc7d1d67a7722aa394e57e427fb
SHA512

7c0f9ca3505824b6435a135896bc1d85b8b7921b4381d79d4f3c9d8414ae7613bfb94985e566c95baa041e7bfceb91e759e56413c44b675aed6445f3e3659d80
SSDEEP

768:W3kK5lxkxB53/kw0vs6IYWOIKt7qk7Xcu3PEL:WUelxyBpeI6Ia1JsL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2cca36e46573d7bb269a30086a6e093_JaffaCakes118

Files

f2cca36e46573d7bb269a30086a6e093_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE