f2edcb17f5015555c92dacc70695a1c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2edcb17f5015555c92dacc70695a1c3_JaffaCakes118
Size

46KB
MD5

f2edcb17f5015555c92dacc70695a1c3
SHA1

2390b7ef144073d5122ef6c8d113eafc532c4478
SHA256

21318f9bb6827324b60c51f54813c3677886f9fbc2dd7ad6bab76d63b4079643
SHA512

beba25f66bf3bf20e692412c3c1036b21c1930addf450e02510a1930ccf71caf50452404f73a3f39bb351e90ccb2b0dc5b1b5eed37bde105907414f598d73cf2
SSDEEP

768:TD1DMs9XG8D2VfNwtuKaQDF7VPyFwYM5vn7tMHgTnfe8T00Njfdi392Id:TD51D2VfyMh+Fc2r7KAvT00C3YId

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2edcb17f5015555c92dacc70695a1c3_JaffaCakes118

Files

f2edcb17f5015555c92dacc70695a1c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE