2438c7d8aad86b196630b39377f167c2_JaffaCakes118 | Triage

Sharing

General

Target

2438c7d8aad86b196630b39377f167c2_JaffaCakes118
Size

421KB
MD5

2438c7d8aad86b196630b39377f167c2
SHA1

61e140d94f63338ba74a0042c7c2f3b648c45103
SHA256

f27da7e823146542cd0bdd267aa0d2ecfe5f9eb6eb8e06b60e3c1b6d2eb5e332
SHA512

8b1fdba7717f3c22ffd0a1cd9fed2aad208a4c8dda2abfddb0984511289e80acf32b79cc866f2e7fd774fc4163fd543c5abf02799c62465638e897d9171782f0
SSDEEP

12288:ioOzzhezOr5S5BdPVYaz4JLHeoMSVZZQLH:iNnhoOr5S5/tYaUE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2438c7d8aad86b196630b39377f167c2_JaffaCakes118

Files

2438c7d8aad86b196630b39377f167c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CYC0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CYC1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ