13f3c63c4bee6d17013782de6c829275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f3c63c4bee6d17013782de6c829275_JaffaCakes118
Size

988KB
MD5

13f3c63c4bee6d17013782de6c829275
SHA1

0c775413a152bb00cb6014d3712958ad046bc3b4
SHA256

b54a0c0a5b8d6695a7874f3bb8c4426adb70ff02003b507da612f7882c1d3993
SHA512

234e7ab2d32504456f19ddc9d3dc290253b52adca774d91d536c64bb235afd405380cb8e616d80502c3bc6090c09674591924df1e9d64d07db473df9cdb68920
SSDEEP

24576:4Y6hSS7xyzTHKzIQC68k51+SpYh89+nAU+nkptOM:q1yzFQCfK+Spu89+npOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f3c63c4bee6d17013782de6c829275_JaffaCakes118

Files

13f3c63c4bee6d17013782de6c829275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Kain
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE