351970a18747c3e0bed72989996cc9b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

351970a18747c3e0bed72989996cc9b1_JaffaCakes118
Size

273KB
MD5

351970a18747c3e0bed72989996cc9b1
SHA1

7ee3dc876389ece56bc158f80a3d91942ec0e800
SHA256

14f8c849e38f36833ddf2713a7a6632388a3661f52588101f8f98bd8a7041f66
SHA512

a1c90e54a8b1bd50e2c5e35b785f8318f9e33463580f91928921ead5493ffc8f8e762ec3f8d583ff6b2a22cb153b8dcad67bbad0414e429a4875f846b5ae68fa
SSDEEP

6144:nbObMkt1gItnPIZBvPr2uInsE8LyPxENW29+Qfql4YZOA+:MMkt19IZBbInscRQfql4YZOA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
351970a18747c3e0bed72989996cc9b1_JaffaCakes118

Files

351970a18747c3e0bed72989996cc9b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE