74b4d0cf5bde8fa219105033aab64bc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74b4d0cf5bde8fa219105033aab64bc1_JaffaCakes118
Size

129KB
MD5

74b4d0cf5bde8fa219105033aab64bc1
SHA1

7ca0e0c3ac6e821013aa5b5bc156c12a437f5104
SHA256

a7ec848e48d5e32805886b0b10fcbcc7e0cef1f4f6211368cb868265bb9c58f9
SHA512

ee8b996c98a3536e9129643e93c775636b3bc289813bc8f133502b17769cd2c661b022ea60d0dd78e9f0fbf2f8315c0f175e47009cb6a3487c8f842ef702d054
SSDEEP

3072:q54Dnx0OvY82/XIod4Dh84k56f0OvY82/XIod4Dh84k56U:q0WOg82/Yod4l/MOg82/Yod4l/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b4d0cf5bde8fa219105033aab64bc1_JaffaCakes118

Files

74b4d0cf5bde8fa219105033aab64bc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.misswe
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.misswe
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.misswe
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zwj2
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE