f973510ca7da82640038027bc8496622_JaffaCakes118 | Triage

Sharing

General

Target

f973510ca7da82640038027bc8496622_JaffaCakes118
Size

272KB
MD5

f973510ca7da82640038027bc8496622
SHA1

8d6f3c786c32d815890dde6764afdd10e5a5c83d
SHA256

8aedf38834b298b48cb5af40d2b88e3a7e2e87a495c921094dd13942e44a74e0
SHA512

d878174490db02a9db12647c0dfe53283f0628073c7eecd7aadc2b17c909857ed3c453d0af8e249eff68577b7c5848905859388ea9f42303f5813c72971cdec1
SSDEEP

6144:4MigebtJQSE7MSNAADuXKMsHleE8IUVNbH:ggepJxEISPKQHCIaNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f973510ca7da82640038027bc8496622_JaffaCakes118

Files

f973510ca7da82640038027bc8496622_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

eI1g57sP
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sYMZvBxx
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4FV9sfq3
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r1rqAz8r
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TwQRIFF3
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4FV9sfq3
TwQRIFF3
r1rqAz8r
sYMZvBxx