0d79d79ae426f3a1728605d6826305c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d79d79ae426f3a1728605d6826305c7_JaffaCakes118
Size

28KB
MD5

0d79d79ae426f3a1728605d6826305c7
SHA1

fead97fa349bc953090c623337c2ed2876b460f3
SHA256

dc1c07a2f5c6b7d52fec6e96601217f4017f2e533863fb9bcaa9f195cadb329a
SHA512

effba6408260f42e820708f95866548399161d276703e55c14bf2238da1a5d690ee659635c7c5f2563c2b018ccbf0a05709eb5fad67f93083fe4c5cd3019b27f
SSDEEP

384:ShfJx7bDp5uO3SvMpHgscv6M7J8hd2D1hxHXjmDo4P79iURxYoscXIWm:ShBx7bD6OCvMpHgtuhd2FHzEz9iWBBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d79d79ae426f3a1728605d6826305c7_JaffaCakes118

Files

0d79d79ae426f3a1728605d6826305c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:~�5
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE