737e105a6b8bc1326d26fcee80aef304_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

737e105a6b8bc1326d26fcee80aef304_JaffaCakes118
Size

457KB
MD5

737e105a6b8bc1326d26fcee80aef304
SHA1

5101638fe4f9dcc2178a2fab613e64b6f1ba354e
SHA256

ba130ca05ef12a839ae47bb5c39deaef49f76282b48e69d16e12bfe8e15e8be1
SHA512

31b98b4d6881aeb508a77c8b1026bd522006780408cbbf3af6b4f3b036bc3bb4867b7f68c2b05416bb82c512605a89fe4edfac9a6e8046f4ea05beebc62ecc26
SSDEEP

12288:fNh7/7lz1txFf/m0Nap9HC9o++tEFg8aGVw5oUG/F:Vhj7lh1feVHC9o5yDdUS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737e105a6b8bc1326d26fcee80aef304_JaffaCakes118

Files

737e105a6b8bc1326d26fcee80aef304_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.fmyacl
Size: 2KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.whenqf
Size: 114B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pnbdik
Size: 445KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ