f98b52efe5bbeafaa30220c639d7f16d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f98b52efe5bbeafaa30220c639d7f16d_JaffaCakes118
Size

264KB
MD5

f98b52efe5bbeafaa30220c639d7f16d
SHA1

1bf915df63990d6e6b93e6ccee0986af0c1b5654
SHA256

1eeff018aaec15bf77dd2bd5bc8281090f582bd5acff1fa5422c86c5e5526e5b
SHA512

6b1294758bdb96e24014f49279b7fcd8f2ddd05180ab456c2468e739c06ccf4e69285458c57ff8c6228c48582871f4662644f2e7371899d28e8f3ee1eb30431c
SSDEEP

6144:AqYqkokHaLUKtK/Nwu/g4nDWgRAkPtbdhGQn8xID0DMFlYOXx130:A5qkrwUUK/P/xR3PtRhGLxe0DqYAx130

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f98b52efe5bbeafaa30220c639d7f16d_JaffaCakes118

Files

f98b52efe5bbeafaa30220c639d7f16d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 153B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ