468b7b517c0696f2ed2cbb4e4b0681a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

468b7b517c0696f2ed2cbb4e4b0681a9_JaffaCakes118
Size

66KB
MD5

468b7b517c0696f2ed2cbb4e4b0681a9
SHA1

68485474f639cddfb262af8d64a6d9047b6b3cd5
SHA256

1b8d9347a061f6fa897b4ac6c0043a7cb13b06517bd31fc37bd570b8aad9de72
SHA512

7aaa48a812a688466ed7a647f814ca0efbde9aa99e2352c80785722d296ded79d34d7eb02bbaaa86963ab7f7d36f77cd80f5aa92e8758eb8728b2b15069f0501
SSDEEP

1536:xp4R1+aJe1mgawzxsBub8PC1jIHxATVGMZXcCvfA2p2nNWs:n4R1+aJe1mgawzxsBub861jIHxowMZsB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
468b7b517c0696f2ed2cbb4e4b0681a9_JaffaCakes118

Files

468b7b517c0696f2ed2cbb4e4b0681a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE