7624dd8653f84407392462b7a2a04783_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7624dd8653f84407392462b7a2a04783_JaffaCakes118
Size

97KB
MD5

7624dd8653f84407392462b7a2a04783
SHA1

8a11b09b039808d524468747b198b4accf91e300
SHA256

49ea80d9c406fbcd2d22df00f80191b757df15ddc8b9010f6e4b8f7040f3b35f
SHA512

615435d37e21bc17f7a1b41d2ac1e8658e180bbfb9c30285d1a1d76c3cc1f09b691aecf36f7fb3ab34c4225de03659c72f6d471f467b723da3e6c809481f8686
SSDEEP

1536:J7fQSFh7NpQpB+r2e+dN7hdpawUc+/9hNTzbWGccRz7c:BfQSFh7rfr2e+dN7hfd2TYcB7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7624dd8653f84407392462b7a2a04783_JaffaCakes118

Files

7624dd8653f84407392462b7a2a04783_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dfsaewr4
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ