467c0e0978d6d41a0281ae7a771754a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

467c0e0978d6d41a0281ae7a771754a8_JaffaCakes118
Size

850KB
MD5

467c0e0978d6d41a0281ae7a771754a8
SHA1

987040166c093bf0879c66e64dfff55a481efa04
SHA256

7c89160ad16fc789471a93ab5c53698201003645111ff4e952819b14fa0594a8
SHA512

08d69a19a0065f6cfaf79c0bc4b51fc6ac878ce67c23561874265e5f0f958c27ed3d78b1ff2c349ccf34d9dc9fb9db64e55e03eaac5c2bfbe48de7a56ed28335
SSDEEP

24576:bYpf5706TWZ3NeJPMACYhehhp+4swYyQbSYfXfo:beTiNyD4hp+4sAhYvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
467c0e0978d6d41a0281ae7a771754a8_JaffaCakes118

Files

467c0e0978d6d41a0281ae7a771754a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1324
Size: 740KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE