14cf83807a4f6c0631bf8052a55853b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14cf83807a4f6c0631bf8052a55853b7_JaffaCakes118
Size

532KB
MD5

14cf83807a4f6c0631bf8052a55853b7
SHA1

6faaa97e952c5a70dd52eec708e7cbec06a3739a
SHA256

53e9e8e8e0267758da30c6d3353b9fd2d377d3804273e7213d93375cc6a631d0
SHA512

8dcc3122ba31c46f18894ffcb5dacbfc70f6b1932352c19a86096f2baa7ce55a462a4f0ff2032df8af3ab0f77f5a0b6ef4cefc2e98d5b944b109dd840ebd1c57
SSDEEP

12288:D26CZFWrgy56A2fVPh2RIbWcoIFFEgB9nP17:STZrBAyp0IbWcoIFagbPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14cf83807a4f6c0631bf8052a55853b7_JaffaCakes118

Files

14cf83807a4f6c0631bf8052a55853b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 483KB - Virtual size: 482KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 868B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ