18d902de9ee6aed626a50ce12c402bb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18d902de9ee6aed626a50ce12c402bb6_JaffaCakes118
Size

137KB
MD5

18d902de9ee6aed626a50ce12c402bb6
SHA1

ab5afa45554fad8b2955713354042442ad77929e
SHA256

76ca27e5a91a14bde1802f5f21b8f33e82f6045c2ee5f7c030c1623d88625fc7
SHA512

e21305eee8f54df7b8ff9297c5dc0077a5bc71e9cbb6757777d3b5851bd5a65a98c89e25706f5aea124a77d652f2ee03cd6bb35f14abaef6fd4e00953bbffe64
SSDEEP

3072:14J2wTYh5q3Bxcx9LvOj8JgTB4W/dERuMuwfP8qTijH9O:1hw0h58rA1E8SB4CEcBwfnio

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18d902de9ee6aed626a50ce12c402bb6_JaffaCakes118

Files

18d902de9ee6aed626a50ce12c402bb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ