627642bec2d7aee67b892f0c4a5ab672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627642bec2d7aee67b892f0c4a5ab672_JaffaCakes118
Size

404KB
MD5

627642bec2d7aee67b892f0c4a5ab672
SHA1

09be5cacb843edce8945e4368140f61a88cd119f
SHA256

7a4d452dbce187f5c47eee40cdce3f85bf810fcfbad827fa0df7d4cc1b68991a
SHA512

6f1a889331cc63ef0d248d4cc12fc8813d0d5f63f995c01b02fe15f33c36a61678017afee108a6d9e094fdd250355838826137d03b3fe82fa7dd26ac7445d8aa
SSDEEP

12288:ecsUMcrdUQZ8dXb3AmMlAiUMcrdUQZ8d7:Ocre7dXbxDacre7d7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627642bec2d7aee67b892f0c4a5ab672_JaffaCakes118

Files

627642bec2d7aee67b892f0c4a5ab672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.scpack
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ