f6013c7e407b5aadb918e6804d653ad1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6013c7e407b5aadb918e6804d653ad1_JaffaCakes118
Size

385KB
MD5

f6013c7e407b5aadb918e6804d653ad1
SHA1

1603db7f993be4eec913f123e37c505355aeede0
SHA256

bd2f15108e8ea953d52b505ea1372f917584ea4d2b12d5ef0ea6653926fa32fe
SHA512

3e8b0eb0fd62b9d5b7eae30689f8d59bd75145a323c46763c2d61bd6a437d39fe07eb25d6d35a2212676a2e48f7c6230401cac9e0e51eba170aaaf845484a8ff
SSDEEP

12288:NUmQQxiTS8nLIZVHSFAj4lCZIc1X30oZw/B:4IkzEZIc1X30oZw/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6013c7e407b5aadb918e6804d653ad1_JaffaCakes118

Files

f6013c7e407b5aadb918e6804d653ad1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ