f5f63dfda8d43b00831f42a6652486e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f63dfda8d43b00831f42a6652486e6_JaffaCakes118
Size

506KB
MD5

f5f63dfda8d43b00831f42a6652486e6
SHA1

73921b74b59462018c27af69e2c8f546c7f216ba
SHA256

67fefea1b6eb30193c99673c91d472fc3998a32ede651d6eef3a96d449c97b07
SHA512

0e46d31c642cccc28fc11bfb9cae1be39032d7aae3c249072b0610d9e5fa7766b30091a5d3f5a13063daebab73b618158a5103316e8ebc08b42f13d35a397a73
SSDEEP

12288:jS8E0JVJ/p5KU4sXikNJG/U/+vVeTfyJptU10K581:jS8x/jiiM9Ne3d581

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f63dfda8d43b00831f42a6652486e6_JaffaCakes118

Files

f5f63dfda8d43b00831f42a6652486e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ