0954e6cbbbf15736c130de392fef3183_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0954e6cbbbf15736c130de392fef3183_JaffaCakes118
Size

376KB
MD5

0954e6cbbbf15736c130de392fef3183
SHA1

a172de9af7f523399997ba274840802cfbf70bcd
SHA256

9b58764880df86cf8311e6a8deabcb3232e9b92622e74a15776beb150479f8b0
SHA512

d4661f21c039bc5e5d24fd9884c3b5b2bfbdf1c36320edcb2c827be622fef053f3f368965269de4a7640fcfcc18956b61b139852aa4e044736411c5f5a6ba563
SSDEEP

6144:zIHYsZbS31zXqSNQgeiOKnDYVH0pwpMWEmpRBJ1NuUBY+f7zAF11whggaoHofph4:zIVZel6SOgeiOKEVH0ppWfBJ7XBczmRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0954e6cbbbf15736c130de392fef3183_JaffaCakes118

Files

0954e6cbbbf15736c130de392fef3183_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ