1569aaae350438597ac64dff6c49616c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1569aaae350438597ac64dff6c49616c_JaffaCakes118
Size

44KB
MD5

1569aaae350438597ac64dff6c49616c
SHA1

3aa36adfefb3b81319f730f2553b5ca16166fb77
SHA256

c3fd8364262f38a5e66ded93feed356dc939c70fd1efeb95a256f8745d84b633
SHA512

f4b1869810e6b309f20952bf4cafe4d0e9f4d9ef976f7ba7e71b666f192b8a492450c2fbef83873e248da02f37f8c36f44e435ffad95a0db2d18bec132d255f5
SSDEEP

768:hWPWG1AV62ZbPWnE6RyfrIeCAkY6ARzIY+NZEt51vHOuiKYJPZ2enW+fI:hWPW2EjIx6RRn1vTYZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1569aaae350438597ac64dff6c49616c_JaffaCakes118

Files

1569aaae350438597ac64dff6c49616c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xur
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE