158cbdd4195e8c7b1c7bb63ff1efbbbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

158cbdd4195e8c7b1c7bb63ff1efbbbf_JaffaCakes118
Size

269KB
MD5

158cbdd4195e8c7b1c7bb63ff1efbbbf
SHA1

87fc3102127cba824826940a9f457bd0f3a35dad
SHA256

18de607c340205b12f5e87d3eaffedf05ac8148666eaee17c694fe10090413f4
SHA512

0bbb54f8086f1e9f49263cd18e210015ded9f4c522bcb96394d1692d76d97d82d1613f6bfc8341663b20bc95dd92c464079a3b3c4bec4281081aa3fa5e3b98c7
SSDEEP

1536:5gG2TryXgbmUGiSYHKCrTjQmrMGWJLE7tTd8:CGhXgbmyhHKCbQk0JIVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158cbdd4195e8c7b1c7bb63ff1efbbbf_JaffaCakes118

Files

158cbdd4195e8c7b1c7bb63ff1efbbbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.Upack
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dswlab
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE