695085c038b7673e0f4a9c60ee61b345_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

695085c038b7673e0f4a9c60ee61b345_JaffaCakes118
Size

195KB
MD5

695085c038b7673e0f4a9c60ee61b345
SHA1

c06e943aac7d71e4bd9d55a4d653ca81a1958a54
SHA256

1cdbe32ab8423de8e6ee225f8360946ea758045d0d077255b7d4c1febd923216
SHA512

56155ada2f787e3f6e49251815b75dd11b18904e56015e1af5cf6c6a0aa27c68f7573165a4003e21485a02e9fe89ef860187f537e4f310166868181927a4d4a8
SSDEEP

768:RZZDhYLBERNBpnFvtPEQBfxeSRpZ/T9IeF9ms1mJSzagYLV5eEdU/gEeCYEAM:DRhoEXBpnbfRp8gmJAag+HdU/gEeCCM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695085c038b7673e0f4a9c60ee61b345_JaffaCakes118

Files

695085c038b7673e0f4a9c60ee61b345_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data
.idata
.ndata
.rdata
.rsrc/DIALOG/105
.rsrc/DIALOG/106
.rsrc/DIALOG/111
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/MANIFEST/1
.xml
.text
[0]
[1]
[2]
[3]