695e238ea4c8bb05c30d46cada082dc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

695e238ea4c8bb05c30d46cada082dc5_JaffaCakes118
Size

18KB
MD5

695e238ea4c8bb05c30d46cada082dc5
SHA1

ad6bd33517408285d34267265a747590471797dd
SHA256

a33c719d170bf487ab637c07d6db670946752985b5d7755ccf576b0c9f59861e
SHA512

084406b82929478f7fd6d2d4dc5e00183e68ac8960d8bf087cafb37c6e952a08fc6c907b5184edbf42b5fae7969be28d7e78ede9154328f92f680d779f9aeddd
SSDEEP

384:c3wARuYZu8YUVAuLewbhEwKghHkO+M+ErNqZbOen:c3j4x8ppLeehEwWzErUpln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695e238ea4c8bb05c30d46cada082dc5_JaffaCakes118

Files

695e238ea4c8bb05c30d46cada082dc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: - Virtual size: 259KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ