01028d939ea9290402696a39ce84479b_JaffaCakes118 | Triage

Sharing

General

Target

01028d939ea9290402696a39ce84479b_JaffaCakes118
Size

116KB
MD5

01028d939ea9290402696a39ce84479b
SHA1

d3ad62fd49f54f445d386aff87e075f376678bc6
SHA256

7a708021dd5b6b1392675014c896b287d4bd21cfc3dc175fa00b291c6ab6c159
SHA512

6185ec0985591ef8f1fe160d7fd990f7489d1e570717e3ec28640da5d65d6edb9e04bea96723e9633eb3162a6ec05c62885601dd0574c0eaa1821d70d63ad6ec
SSDEEP

3072:b7PRLVrwYy2dikLQN34FlaHLqwLUDHzxyQ:HRLvBdyOaHL/AvxR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01028d939ea9290402696a39ce84479b_JaffaCakes118

Files

01028d939ea9290402696a39ce84479b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

kct
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qcfcm
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9gh
Size: 2KB - Virtual size: 895B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE