639d86803d6ee05b9adbb17c9b74e3f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

639d86803d6ee05b9adbb17c9b74e3f0_JaffaCakes118
Size

269KB
MD5

639d86803d6ee05b9adbb17c9b74e3f0
SHA1

f63f3206c676d3445d2f95e175d7bf1f0a26144b
SHA256

45b67e8fb5940bdc39d7593624807f2710a5d7ec8e6d519908f0b574e85a82ce
SHA512

bae456db611836a0618fcd08a2ccc85bf9401f99db08af885fc4b872cf30a446f321004c154074e7f50e8342fa607e5e344f7bec3371ca42ee07d89d32629914
SSDEEP

6144:bgqt48ZoNEScrh4ZCet1YRybiTwdRGEmf0qkt3jTo:93eQ47t1VblRGJ63jTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
639d86803d6ee05b9adbb17c9b74e3f0_JaffaCakes118

Files

639d86803d6ee05b9adbb17c9b74e3f0_JaffaCakes118
.exe windows:10 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ