14a0e2f429c02578341a593056cc3410_JaffaCakes118 | Triage

Sharing

General

Target

14a0e2f429c02578341a593056cc3410_JaffaCakes118
Size

987KB
MD5

14a0e2f429c02578341a593056cc3410
SHA1

66fc121652467428797b5acef9f8c88b7c01aa70
SHA256

5c5ecd0b884b60cab634617bf5480a8210ddc4d74dd5463bd73432753b93c13d
SHA512

118caacbc350d570e94879b6a1a3bb426d2b253667e6c8220931c1ed5a3ead99c19377f8701541f9bb2fe40bcce3a6e1bb803d2847eb4f1ea116dc0981e5e9c4
SSDEEP

24576:QW16c//////xWaTDVIPhquYWwJn0JP3amd3x94WwJeMjJHtNBczqzU:bsc//////xlTDuJqu+n0LbCHWzq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a0e2f429c02578341a593056cc3410_JaffaCakes118

Files

14a0e2f429c02578341a593056cc3410_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

madTraceProcess

Sections

CODE
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 236B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ