69d5db549d275366e6a80a3e1a4a5413_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d5db549d275366e6a80a3e1a4a5413_JaffaCakes118
Size

234KB
MD5

69d5db549d275366e6a80a3e1a4a5413
SHA1

a7acfaa33220c41e1e0bc60170d9ec86d23a0749
SHA256

86c0ae1f023c73d7da6df82d73d83b021ec20e2567e22e7accad1c5310e4775e
SHA512

37309bb57b3fc835b8608951ca49ca1cfffad27b50f5b41fb473076009f634542f9686f80b88c724b8860e13f53e3e9e70895d83c93eee1efef886c1b783935d
SSDEEP

6144:g4nDWgRAkPFkQ9Xq4nDWgRAkPCGLWXdH7UGZ5X:xR3PFk2XR3PChaG/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d5db549d275366e6a80a3e1a4a5413_JaffaCakes118

Files

69d5db549d275366e6a80a3e1a4a5413_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 263B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ