69080eb34677a01bfb883602d5412d69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69080eb34677a01bfb883602d5412d69_JaffaCakes118
Size

378KB
MD5

69080eb34677a01bfb883602d5412d69
SHA1

d03ee9f7dfe1e0b6a705454dcee4b1d65c213b93
SHA256

3986f306066189e6962c968e579c556c6c2276d448bf6b7ae3a303afe8af04e3
SHA512

508be76301765941673e6c659ca58896198ed9738ee53c1ad0f3bdfd7e453ee97cc3e50bc37fc248cd772981b53f4117cc87a87b6fed414bb8fdcab676ee5f53
SSDEEP

6144:8YuuzgcU7MoPYoN0km80jFXAqK7B+sh1rl/tFm9rIs2vlkh2HTcIKuFz:8YBzgc7CYoNLEjFQl7BHhJlFFmxIs29N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69080eb34677a01bfb883602d5412d69_JaffaCakes118

Files

69080eb34677a01bfb883602d5412d69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE