f449a4936e74de71b889795c3efe8ca1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f449a4936e74de71b889795c3efe8ca1_JaffaCakes118
Size

185KB
MD5

f449a4936e74de71b889795c3efe8ca1
SHA1

3504239e4a5b89e359b0f4ce92618f50ddcf662a
SHA256

000c7dd4a58472bbf82b9bbf0474933ab750f0872046888dabf70ea4c989672b
SHA512

ff44126f96b648a6455561329a79122d1a86efcf9a3571cb9aad17a918fb1ad010881a16e50a6ad51712ea38a6ec3d8351138b6600aaf647351e0441d0e3d904
SSDEEP

3072:pi/pe/0YGeVKxK3ZFJL5bNdSBuUe9MwoYv/vU+aT0gCCJlv/BnfLaX:MeMbeVK4Fp9LSsUe9MQM+m0gCC3v/Bnj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f449a4936e74de71b889795c3efe8ca1_JaffaCakes118

Files

f449a4936e74de71b889795c3efe8ca1_JaffaCakes118
.exe windows:9 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.xdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ