f72bd490dfd842e4bb3960e3038aa3b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f72bd490dfd842e4bb3960e3038aa3b4_JaffaCakes118
Size

143KB
MD5

f72bd490dfd842e4bb3960e3038aa3b4
SHA1

312dbd6de3cf6127c35a4055b7bcf039c5208ca1
SHA256

0fc8f849cff2e99d65435da6bc9781a0ad111fb75a95f2e147d0fd39803f609d
SHA512

2f0221ad337936a0dc89fbc82825afc1c131b73067cb0d362de6f493154b3a7b95f41c5dada721a91df32d09f98a989c85de77baf56fe5a4d8b5f61928d43300
SSDEEP

3072:NdkN4hAs0fpCqifHA4uns/iohJ8xWZhdeSJoaBAITnAa5aVBCHe:NmYqRbiHSocxWZhdepuAa68+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f72bd490dfd842e4bb3960e3038aa3b4_JaffaCakes118

Files

f72bd490dfd842e4bb3960e3038aa3b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE