f781024d665b077ba5023e5e9ab894a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f781024d665b077ba5023e5e9ab894a8_JaffaCakes118
Size

385KB
MD5

f781024d665b077ba5023e5e9ab894a8
SHA1

7679983a7369bd643911ada5d8ca7d0e9dbaef56
SHA256

6ed0aa6e212bbfd7e690633f8a00d4dba0cd0aa376651659f05cd1de013d96df
SHA512

18df6eddea18827a3149c80b8f24870d3c717be33af03288328ee0d4955bdd871716f2df8f5269f3af34df602d5730e77ca14b3d791cfdcc310b0b4e1ce070a0
SSDEEP

6144:7cXpOZX7830PpqP/EIheGX3JvTESX5ru+MQa3GeEAkUP4rLa4/wjSP3coVWxyPqB:IZOS0o9heI3X56+MQMGkP4L/QgV68qB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f781024d665b077ba5023e5e9ab894a8_JaffaCakes118

Files

f781024d665b077ba5023e5e9ab894a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ