7770689d2f607dc1f8adbc6837e1f680_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7770689d2f607dc1f8adbc6837e1f680_JaffaCakes118
Size

324KB
MD5

7770689d2f607dc1f8adbc6837e1f680
SHA1

cd2b8e67685ad9ce812ce98e3938c8b4d30a3ce3
SHA256

9a74f053b24d9073708273cd9a4bd7a8e1d3329c118b00b8d8f437208956d3d3
SHA512

063800859d7b4f720a437739f09e064a9044fe58b74b361879fa711fd2ccea9a09bca639551a808618ea48980269dfb12cd9947145dcb8122d27db9a59516f45
SSDEEP

6144:0oj3JPH9vPCQrEpM7UpS2pUwcyEwGZEcuL7aV3/Q:hFfNCz2UpS2pT7lLL7aV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7770689d2f607dc1f8adbc6837e1f680_JaffaCakes118

Files

7770689d2f607dc1f8adbc6837e1f680_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xiaohui
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ɵɵ0
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ