215f7da650ac00b844064196f7f6da93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

215f7da650ac00b844064196f7f6da93_JaffaCakes118
Size

201KB
MD5

215f7da650ac00b844064196f7f6da93
SHA1

88c249747d41d10b874ffc103388abfc9f7f5763
SHA256

0006a0d63007fb4317ff513120dd95298e2abf6a205e79c00776f49f6c46b32b
SHA512

11a1bdb22a9771d450f4a922a3cd89c95417c32372307b072618b3b8342789a5825cbec3ef74ebf3e957c14f6d0cff96702642a87dda97414e042fcdd589f0f5
SSDEEP

3072:Q3+LwwXx0FWdeccQr3YlmdMKAVPaUDaokdncrpMf0P9NIkPqnqFEF0c8:fLwwWFiecc6qmdMKAVZaoaaEEekCnAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
215f7da650ac00b844064196f7f6da93_JaffaCakes118

Files

215f7da650ac00b844064196f7f6da93_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.x$9aky
Size: 921B - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qhr$pu
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kw806o
Size: - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 726.0MB

.rdata
Size: 199KB - Virtual size: 200KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE