f8dae1c8f22882d090e4da5a882eaa13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8dae1c8f22882d090e4da5a882eaa13_JaffaCakes118
Size

385KB
MD5

f8dae1c8f22882d090e4da5a882eaa13
SHA1

8b12f6d4c7dbe7d8aac10707308fc801df91023b
SHA256

f9c6d282fb26246c334662f03a11b92026e4ed1589006ed2699e828550560061
SHA512

69558a03b9f25db487fd967a2326bec1434b784e41e24b79451b6529a691224187f5eebd95e0b2400b2e2e57282c999bd6eb8c962fe862abecae0591420fdaa5
SSDEEP

6144:vbPlW3wiOe/as4VFK7F18KhBI6WTpCmJF0vE9ip8oszy30aki/1yYT3vbguNQJMB:DlW3zOeis4UQKhBHFLG5y3dJBrJsMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8dae1c8f22882d090e4da5a882eaa13_JaffaCakes118

Files

f8dae1c8f22882d090e4da5a882eaa13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ