702fd7c1bd1c00dda94caf07936ad442_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

702fd7c1bd1c00dda94caf07936ad442_JaffaCakes118
Size

16.2MB
MD5

702fd7c1bd1c00dda94caf07936ad442
SHA1

7345f2a2b14f8ed542898113923ccf1e7bc8c7dd
SHA256

896bf7dc88e42a93d14fc652884eee59ccf224e8d01c6496090bcf08a29a05a1
SHA512

fea8ac6625ad1ec044bfb9c0811ddabada1fe08c612729090bb9679b9c8e180ceb1fe9368c2cf965d737686e9b728f8940249c5ed19c6db4cbaabcf734380690
SSDEEP

196608:BFbqqhDaaZVeq8QQtr6ge9fM0bM4NmY52vGRjeQ0T84p2iUNKBPOf5wGhBQiso3C:j4aDeqdQ+LbCY52vwh0T551OfKMM4W82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
702fd7c1bd1c00dda94caf07936ad442_JaffaCakes118

Files

702fd7c1bd1c00dda94caf07936ad442_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15.8MB - Virtual size: 15.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE