779c40b0365de6086e81b3c1c158c8e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

779c40b0365de6086e81b3c1c158c8e6_JaffaCakes118
Size

68KB
MD5

779c40b0365de6086e81b3c1c158c8e6
SHA1

f86e84bd7ca5cb4c58b91f5effc414e45dbfc851
SHA256

681745285e4f4b3a97133cac20a3d10dd1a32076cc72c45e142be3b2790052de
SHA512

521104fd5c7e85e842a105554e86c9c97d0e6f185e09aaab9fdba4256a43579ce2c63c7fc837b528c77ec6cc3484b2f755201cde620d36307128915bb6cde2d1
SSDEEP

1536:1MGzqIfhbp1pD7ShVWEn+zAQ7YAk1QoQ6q5Oe0DuAd5ET:10hVWEr151i2e0DuVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
779c40b0365de6086e81b3c1c158c8e6_JaffaCakes118

Files

779c40b0365de6086e81b3c1c158c8e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16.1MB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zaer
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ