757a467cd10da71a5f13d60709edfa90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

757a467cd10da71a5f13d60709edfa90_JaffaCakes118
Size

1.9MB
MD5

757a467cd10da71a5f13d60709edfa90
SHA1

ee2005f0178d5a5dcc93a988fff1f0dd885ea124
SHA256

7fb5d7613ce33503fb5593f3c88b2834acb25e9a8cbc9884363468f072b52b5f
SHA512

874e1e0654ad9157029d38bd5ec9d9c0323c1d3d2207f9206b7261d4ec88994789eabfaa4041c0c1df68ebbeeda1f461ec73dfe01d3c1d4ad2a1207a44481b50
SSDEEP

12288:xs5Z7TagDQIUUwpjAIKpaXp5ywlkpxGSOPbwJvD0I3D9gC8jdIil+zqb6YRoMo+o:xc7uBRp0Itp5AuiD0I3D9l8pIKbO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
757a467cd10da71a5f13d60709edfa90_JaffaCakes118

Files

757a467cd10da71a5f13d60709edfa90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 1KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 3.0MB

.engine
Size: - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null
Size: 721KB - Virtual size: 724KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE