616d52d6de53aa10a4056fe598848284_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616d52d6de53aa10a4056fe598848284_JaffaCakes118
Size

324KB
MD5

616d52d6de53aa10a4056fe598848284
SHA1

b8c71362b27ec46aaf57763e65af457a451045df
SHA256

7f674857e1f9016b51cc9066cde5464cc28c8cab462e6a3e2117c8221b21cfee
SHA512

02c6373e79f8b1486942b77326f896294c4cd2005e11426ea727ae5fe194e22a20213a69620445c155f0f886abd8e63c18ada35e4f565d26ca5d6698383ac7ee
SSDEEP

6144:og8a4ffBFT/QTgNirJaQBKdVejQVJqBZtM57K7IBCW3icw:aVHTIgNitEdAUVJqjt4KR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616d52d6de53aa10a4056fe598848284_JaffaCakes118

Files

616d52d6de53aa10a4056fe598848284_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:~�
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE