627973f63d4275e8a178f1a5bfb1c47f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627973f63d4275e8a178f1a5bfb1c47f_JaffaCakes118
Size

213KB
MD5

627973f63d4275e8a178f1a5bfb1c47f
SHA1

953ffcda59c983039287f21960baa5d5e4494eed
SHA256

ea030a47b155a38eaea2e5a6f81ce68f39144aa7f09aaaf963e23e494c82f575
SHA512

570c2e12515e18cd79a85b960a8001ac9b108bee4c519795b9b35379fdd4bea1256fb925650ca6a3e7e0788c0838f5a9e96bfc3a1d5821e14beff6c30afd0213
SSDEEP

3072:iP2rHwvxiIe91s+n3p/5e8jR0cTs/w+VLXKr6vkvs9R8igyQfgEOBeOB0Xb9F:EBvXoim363/OG58dyQIpX27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627973f63d4275e8a178f1a5bfb1c47f_JaffaCakes118

Files

627973f63d4275e8a178f1a5bfb1c47f_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE