65e5e9e6bdc16640284501246b508452_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e5e9e6bdc16640284501246b508452_JaffaCakes118
Size

544KB
MD5

65e5e9e6bdc16640284501246b508452
SHA1

cf22bdcd47c38d3492ae21ff644ec60c1f8be91e
SHA256

2ef3e45533fbf93696d9033b8fac6376fe8983c95c6135f70bb153c29f17b366
SHA512

0c7e19423f778ce09f925b63665c547826638448dc3aa6a1ac065f958baafb31a4aac155bf26f3d85493fe9f1d6380beeaf601fdad3cfa8848ae7008b0cc3f23
SSDEEP

12288:881/O/PdoP6/gGBTZQKW677g1pXf/gGBTX1gX7Y:8y/O/PdoPoZQKW67W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e5e9e6bdc16640284501246b508452_JaffaCakes118

Files

65e5e9e6bdc16640284501246b508452_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 50KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.74M__
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CORE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ