768b45664511ce2ee92d6ddf0363d62a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

768b45664511ce2ee92d6ddf0363d62a_JaffaCakes118
Size

138KB
MD5

768b45664511ce2ee92d6ddf0363d62a
SHA1

bdbec40ba4a692dbecc9429ba93b2883333146bb
SHA256

c6a98f4d149795b5879686a29c08eb4e1b55e10e455a32a9e3cbf158b7bc509b
SHA512

0710b1a3fb9cd3266f22817081b78f5da1f35d74b06eb6dc836a6d35da090c45dd6aa3a217dbd58576a09c5e9f5e79283cc6e04fa836c474ef5fe117c729830c
SSDEEP

3072:PcSZ6MKkQVDf0USLEKSoT+YzvKmXuX0hpiZAiOMAQiwl:DNQEp3vKmEBZ3OMAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
768b45664511ce2ee92d6ddf0363d62a_JaffaCakes118

Files

768b45664511ce2ee92d6ddf0363d62a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 129KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

peei
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE