f850585edea822e6fc6da05c9f4ec7c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f850585edea822e6fc6da05c9f4ec7c3_JaffaCakes118
Size

771KB
MD5

f850585edea822e6fc6da05c9f4ec7c3
SHA1

a5e5acfb7c8ec5711c37608f81c4449a096e171c
SHA256

0f4bedab76faccd0c6aab8266076302b4ffffc0f2e98e7d801cc0930b235c533
SHA512

dfadc32f7578b3a850a423075892a4ab61d07fe1bce3a7162e6b9f7d6bfd69873d927bb679eaf64844115a37c5008d6660491920130a73881ef9e240f956798d
SSDEEP

12288:xYHA3Y0TXkisa0YifSJ1w0/mL6rvTHZWyb10VHmDXTuFaa2AtyGTKOF25ZoJJyhO:+g3FLkEpplTHNb10hJaothZ2/T6FBBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f850585edea822e6fc6da05c9f4ec7c3_JaffaCakes118

Files

f850585edea822e6fc6da05c9f4ec7c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ