314c659b326438504b58b2289db7f110_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

314c659b326438504b58b2289db7f110_JaffaCakes118
Size

121KB
MD5

314c659b326438504b58b2289db7f110
SHA1

62e7e97a276899ee7f1fa5e3a876a784e142fde6
SHA256

9ad3115e69f1545b4bc281a69c3b7cc9f5407e043a185596e06216282a8eb8f8
SHA512

cbf64295f591f891ef84170c57cc1bf497fc2c428dad8ae347b369ca0103a8cf19f1328b35e16567b32c7c52520102b33129dd23e80da9424077e05155faf33d
SSDEEP

3072:YvQgXCUAePf94YsQofOWGd2Mm+H10UgNRd:YvQJdaf94Lmd2MmU10Ugfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314c659b326438504b58b2289db7f110_JaffaCakes118

Files

314c659b326438504b58b2289db7f110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE