f3fa1357f288336f26163b8db3c369a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3fa1357f288336f26163b8db3c369a5_JaffaCakes118
Size

870KB
MD5

f3fa1357f288336f26163b8db3c369a5
SHA1

fe2d3269f8dfcdcd96cbe09c7b7cd79fe529ebee
SHA256

63e68383a20b9e05d5f095c7ff63c4c06e201862397e92785090296d2880c6d1
SHA512

6e4607695050adcb5c13baf124867db3a554e0aa05ccd53a1c07c1890c18ebc5bd3f0f51bac0ae0d4833aa14ad1ff023a5713e98b152d8c63ba8f6e7b56d163a
SSDEEP

24576:3Zsb9Qr9fsxQNW4dvGyX4bToIf9uDdqA:pYxQ0IvG+4bToI1ScA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3fa1357f288336f26163b8db3c369a5_JaffaCakes118

Files

f3fa1357f288336f26163b8db3c369a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE