149dd7ad1b2b8bdd4705438e5ce90e70_JaffaCakes118 | Triage

Sharing

General

Target

149dd7ad1b2b8bdd4705438e5ce90e70_JaffaCakes118
Size

2.5MB
MD5

149dd7ad1b2b8bdd4705438e5ce90e70
SHA1

1bae68a6cc524e88987052ce3839b0ad5c54c822
SHA256

86487138483272578a15d96cd4f5ade56e72ad6881e13234bca473f2e7effb30
SHA512

cf5aa42c6ea0522c09c1fe2d69fe4ca2839956da0179e0dccc29c55c56f1ec4f6966cd53210a89a32377da8bf93d7d5dff0a5937fb087ff2e55fd5bdc8a3c225
SSDEEP

49152:KFye7ywP3oawdGcAxcCuHjJ0fc+81p6NAJ+dPWmvfrVUTU:KRrPUG/aPD2fc+FAJ+5vV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149dd7ad1b2b8bdd4705438e5ce90e70_JaffaCakes118

Files

149dd7ad1b2b8bdd4705438e5ce90e70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.hdqhoq
Size: 3KB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.repdtc
Size: 83B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dtkrgj
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ