71b475b483d932c96e77296275993d84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b475b483d932c96e77296275993d84_JaffaCakes118
Size

210KB
MD5

71b475b483d932c96e77296275993d84
SHA1

5db95418bf9c78240402d6783ebb23ff1e04316e
SHA256

36124e89a005c471d82003d40e5aa079698abd01be10a6d8754b0436c48a4a94
SHA512

0656dbf0e9407226a703f7762efa16f725a6d6ffb3314d6eec2c7ea47310b670c5d8a10d4f4d8ce902eff8ddf981c8a1d571f621872b4cfb53b327630d20d0fe
SSDEEP

6144:/7JY0B6Jy26D2cztF5sfmFNwPJWedr9e9OVsajFfNZOD:TJY0B6k202Wt4TJWebe9OSaBVZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b475b483d932c96e77296275993d84_JaffaCakes118

Files

71b475b483d932c96e77296275993d84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

udyh
Size: 1KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vgwq
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ