7d67a32aac7b8d0885449be7c9b8ba78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d67a32aac7b8d0885449be7c9b8ba78_JaffaCakes118
Size

216KB
MD5

7d67a32aac7b8d0885449be7c9b8ba78
SHA1

01bd905130f78bfaa67933e916ebedfbf592d3fa
SHA256

83d54812ef5c3103e8fe06ce9610001669e997af5673275524a964b84d97a4a8
SHA512

06105ed3ee482ee4207fbbde08c19fa966d688fc6914855647317b5a43aa3851707848a1aacb4b7d37ffbca15200c6a9e0d76112c754c11f91e515d74e1182b7
SSDEEP

3072:l9DtSoETWAFNW22dxuZX6NoF1Sy05Go76HGvml/f97Skhc8j0Le1Pnkz:xSoVAFNyzWuojHfl/bBPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d67a32aac7b8d0885449be7c9b8ba78_JaffaCakes118

Files

7d67a32aac7b8d0885449be7c9b8ba78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vmLSy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ