370c26c5b3ef8d7f883126f54ebc6820_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

370c26c5b3ef8d7f883126f54ebc6820_JaffaCakes118
Size

75KB
MD5

370c26c5b3ef8d7f883126f54ebc6820
SHA1

9125c6795f62bf61b3f8f744f32a487ad9d85065
SHA256

9a839e964d5091e4d24f3dc487b67122af422bd813fd1812053b503363e82a77
SHA512

a91b6ecdafbf2f028fdb20c0e0d9f0d8f76f9085a4a4eca1f7f65278a8dd598a7fae4632d59d1411a527dd644d68a48f55ad2da63fef2684c0f1ab675ef52420
SSDEEP

1536:p2QE4tNgFM362p2zIweWXRoVQw5vwmDUQUcGYF5ViYD:pTE4eMEzIwe/QwCMUQUYxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370c26c5b3ef8d7f883126f54ebc6820_JaffaCakes118

Files

370c26c5b3ef8d7f883126f54ebc6820_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CODEA
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ