f72ec1f30b09546839afdc507a678f4f_JaffaCakes118 | Triage

Sharing

General

Target

f72ec1f30b09546839afdc507a678f4f_JaffaCakes118
Size

44KB
MD5

f72ec1f30b09546839afdc507a678f4f
SHA1

34ababc9fa50946cc069e509622da9680d14a46f
SHA256

6321af21282c4b89bb4774d552526eb872a3f9e4a19b2f76edd3232264856d79
SHA512

c4592c2f153945b06ceb61dc7c5322cdde99866c1206418ee98fd71cda346f7114be640c5a3777fa50d017b715dddd9055827ff54dca63c9217a56c303650054
SSDEEP

768:zmAjVszZDACRnuJoV7FBKa9Cd/BnkeLbmHtwd5rCOtTMf3C:fjF3mDIa9CnkgyHadPQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f72ec1f30b09546839afdc507a678f4f_JaffaCakes118

Files

f72ec1f30b09546839afdc507a678f4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE