f70382c5d5f50e79d3a8c3d6d54caeab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f70382c5d5f50e79d3a8c3d6d54caeab_JaffaCakes118
Size

385KB
MD5

f70382c5d5f50e79d3a8c3d6d54caeab
SHA1

c5d86b908cd19f0dff586cd60c78a6f1c6890bac
SHA256

20dc66ff1642972e95620975694f9bfbee8bc76aee2f9c4c0185b50f466c41e0
SHA512

638b80c4ab065598b36be22e6643016311c70888bfb7a2034bae75608d81622ee497ee6ba071d5ea77dc17e4e8350b5975514fe39bd8fc2c651a413694db4e2a
SSDEEP

6144:u9JCZAlcEZKl+FNpSnSkI1lIlCzOC/EXyTJruv49GcMvrUbk6bTlKr0M6XoAjB:u9nlRclk8AzO4NTFu49NMvrU/bTPB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70382c5d5f50e79d3a8c3d6d54caeab_JaffaCakes118

Files

f70382c5d5f50e79d3a8c3d6d54caeab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ