297b0b3c39c58d58cd0855347c61caed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

297b0b3c39c58d58cd0855347c61caed_JaffaCakes118
Size

406KB
MD5

297b0b3c39c58d58cd0855347c61caed
SHA1

2b4c28d40638bec1bf1baafe0ef1c051bd8049f1
SHA256

cb6ee02657efebcaef8ac1884b3858ead2cb0cb188358ea6737003f3633ed6bb
SHA512

e3806459e0c075b7c4ea1e547dfc331cf4d9b3745f1823812115e72abcbff1ed05d16b0d95ac6b19c5a2dc780d51264bd2902b41006ce41b14ce6a89c6774196
SSDEEP

6144:YoOCf5foffwfffSfUyf90NdRT8b2Ikeuo3vtZvzNiy:hOx0ioo3vtZvzNp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
297b0b3c39c58d58cd0855347c61caed_JaffaCakes118

Files

297b0b3c39c58d58cd0855347c61caed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRPT
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE