623a8887a608a275a79f5ea3b5dd25fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

623a8887a608a275a79f5ea3b5dd25fe_JaffaCakes118
Size

115KB
MD5

623a8887a608a275a79f5ea3b5dd25fe
SHA1

d78b1c6d5aea520bcc95e4ab0b725d2d4b02d7d9
SHA256

52f5209ed050f24900bdd77267e079946f69f668f955419976060089fbd4d870
SHA512

a658862fa6093288df64f3abe6731a2378f3f4a32f7c9f062ad074901a3041628b3ba01fc08909deac20ef2a056248857f17f98da9539c8ef8d979c3e8ea407d
SSDEEP

1536:kC9+CxacU6WzY7UnE1IFtJosjmsj/2P5tfQ4YCgHNaqy9xp3EjFYknq9RkSPqCzs:jcCxacUBUuOcm00tfhYw9xBYqPP1aTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
623a8887a608a275a79f5ea3b5dd25fe_JaffaCakes118

Files

623a8887a608a275a79f5ea3b5dd25fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.kzvlek
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wae6b4
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null
Size: - Virtual size: 3.0MB

.reloc
Size: - Virtual size: 420KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 112KB - Virtual size: 116KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE