f8c72e813f5d289809bee9280f389fa2_JaffaCakes118 | Triage

Sharing

General

Target

f8c72e813f5d289809bee9280f389fa2_JaffaCakes118
Size

385KB
MD5

f8c72e813f5d289809bee9280f389fa2
SHA1

e57ced44b3c980967f289dd27ce0670a415365da
SHA256

fe08e2885152a95de4f49b2ab48ffab0daa90c51f3ccebe05f25318aeca6b325
SHA512

eae6732c47c0ebfd1f3d461decf44aebe4b8744f82bfedda55f4341dcf43154f4ca69d55f6adb513ad199ab133a4e5671574dbcbff1dd67974dea81e19920e7f
SSDEEP

12288:RQtRc6LXaCa2oGOnud49L7lh+4N9WP8LOlB:gcKKsmudg7lh+W9ANB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8c72e813f5d289809bee9280f389fa2_JaffaCakes118

Files

f8c72e813f5d289809bee9280f389fa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ