f39572b7a149fc9b554ae0f5b33bdb49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f39572b7a149fc9b554ae0f5b33bdb49_JaffaCakes118
Size

506KB
MD5

f39572b7a149fc9b554ae0f5b33bdb49
SHA1

abe9b81cbea691fe4be6a6d50443edb267cb82aa
SHA256

80b606f2eb673527890e29e08b08729fdff8fff963853de34616555de989c021
SHA512

e235128feb19d73624780a8949e21dfc10533e78ac96dbfdf4fc1ce98f5de71aeca75ac07ce6ba0df87ced572771a0271b92981b698df1ec9772ed86f5255217
SSDEEP

12288:Ns0Y8xJBeU4dVJAFoaab8ijxybFkfc9K6UVTlM6mF5IGxOv/:NsIwl2FkCK6h6mFhxOv/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f39572b7a149fc9b554ae0f5b33bdb49_JaffaCakes118

Files

f39572b7a149fc9b554ae0f5b33bdb49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ