a5a660e9c77bb8c229e599f9d56cf394_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a660e9c77bb8c229e599f9d56cf394_JaffaCakes118
Size

86KB
MD5

a5a660e9c77bb8c229e599f9d56cf394
SHA1

73d66257ff2473a7b56c7b0e7c745cf2cd4a1d3b
SHA256

0cc7aee6644931b08e846fde3f23dda6b56221e606c8b8c2f765ff1f71705995
SHA512

b8a9ab2dd7f95a0e9ae8ba94d01a522b75c0612998d921cb4b5c838b4e0939a70d72f710b4113ca4df49b0da480bd390a3a11233be9a4b3161042ffd789c8d6c
SSDEEP

1536:ptiGYbxy7cLZHbZPVcfdw0bhFAKT9YuVRUXJLHYeA1H+/TnHJ2//gmHsm:ptryxy7cLZ7ZPmfdfbDAGnnU5Lk+TW/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a660e9c77bb8c229e599f9d56cf394_JaffaCakes118

Files

a5a660e9c77bb8c229e599f9d56cf394_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 412B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ