014f92427afaa3888080eaf3959c587f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

014f92427afaa3888080eaf3959c587f_JaffaCakes118
Size

1.5MB
MD5

014f92427afaa3888080eaf3959c587f
SHA1

c99b1e4d4d7e3fc3268d5bed8ca7e56efec09e49
SHA256

87e68ef0e5bbaa96be726907509b6c3b76a79f2fb09f5b54bda21e6734eae617
SHA512

faef698bf2ac146fca4053e7ff35349d11d9fd512b32551fcabd43829070b7f54b08fc47e0e70306ec0aad3aa827d0938a9db8e36ffb07ba03ed39f33fa1cfeb
SSDEEP

24576:QWWBFufPxyaG81x3hLfRjfdkl9n7qewXFeG90nT06C4R/qqqEJ4J4J4JFfffGi8P:yB43fdF/1sTDC4R/qqqEJ4J4J4J2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
014f92427afaa3888080eaf3959c587f_JaffaCakes118

Files

014f92427afaa3888080eaf3959c587f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1012KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ