14cf1e6c1d4a6b0f035a18720631ff7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14cf1e6c1d4a6b0f035a18720631ff7e_JaffaCakes118
Size

456KB
MD5

14cf1e6c1d4a6b0f035a18720631ff7e
SHA1

1b9407b9cf2fbe5f4f2f2159dbc279715eea4ed6
SHA256

c3fe06a823e4f2c95f0afd15e695fa36399d77d9970a63cecc9126ea5e1ba19c
SHA512

05ab05d0a4222ddd0e9d74e3c6d2946a45b03069e5b33ea349be715feebcb61e9f94c425fbc3e5ff18c146f10a003e89bde5fc5241a3e300380ae8d614fc4f15
SSDEEP

12288:jEVXKpmok+if4JgTIoq43H2cE05nMx11DGkfb7i:jEtR2iAJgMe3H2cJCx1YOb7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14cf1e6c1d4a6b0f035a18720631ff7e_JaffaCakes118

Files

14cf1e6c1d4a6b0f035a18720631ff7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ