153807fd4ed81e99387e80b6d12ddef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

153807fd4ed81e99387e80b6d12ddef3_JaffaCakes118
Size

163KB
MD5

153807fd4ed81e99387e80b6d12ddef3
SHA1

2926c65bee567241abd703f7d3434942faec57b7
SHA256

2801f320eb2fc6005be000a31225eb6f2e33bbb6e42f99897003b800ec38eb72
SHA512

074c7c165f2c86dd96a86f0e7cd1af2f545c08c13012aa809fe511dc2a3a093978c846e721cce3c2d1d65135b5947df9685ac97ccf1be1c42c9842508845c3cc
SSDEEP

3072:gv5lmIoUsJiRvjAZrrF7EJXBPCisvrbviOkAgJQj9j:gxnoULRvEVlEvAvP1KQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153807fd4ed81e99387e80b6d12ddef3_JaffaCakes118

Files

153807fd4ed81e99387e80b6d12ddef3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 129KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

peei
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE