19b03374abc7f1c89e1d78042a40e5a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19b03374abc7f1c89e1d78042a40e5a7_JaffaCakes118
Size

208KB
MD5

19b03374abc7f1c89e1d78042a40e5a7
SHA1

7c8db2804f86ca77903344b3e0c3e51d42e36b5f
SHA256

fcfb53dfec7ef839e0d6ee90635057e60c8451f812a086a4fd54ae8ae4a35f9d
SHA512

023beaefc91481889e29172946f02514348291cbe5c7403bd6adf1669a15bdde1273a9fcad6229f004e14fef27de61f6afd8e5169af4c315d8bb2379752fd7a4
SSDEEP

1536:cC+87y+HgYMF434xld9YLU9KD02BxAcK9SPoYZwA1d:cChJgYMm4xf9cU9KQ2BxA59SPMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19b03374abc7f1c89e1d78042a40e5a7_JaffaCakes118

Files

19b03374abc7f1c89e1d78042a40e5a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE