f803fba5b3232202a7dbea1809988f71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f803fba5b3232202a7dbea1809988f71_JaffaCakes118
Size

907KB
MD5

f803fba5b3232202a7dbea1809988f71
SHA1

548697680383570f7f128e106fc2316df8d784b5
SHA256

9ea15f5cc34b9edfe1b9e595da9a53c2ab9468525b4b4005a0cc9eaecfee6f2b
SHA512

09c24f90d6b7084160fc08550e69104f1f4f2afbfc9cb393c0a3926255a671f241fc4a57236569935868fb1ea0983a15a8fc8f14d11b2d6a900a1bdeccc1ce36
SSDEEP

24576:vVylScaDpaIktoG9uwADV7umvY4BN1JqP8a/ZS1:DktoG9Z20Z4BN/qP8gS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f803fba5b3232202a7dbea1809988f71_JaffaCakes118

Files

f803fba5b3232202a7dbea1809988f71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ