7839dc8c05570050c8a6b01f50d95061_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7839dc8c05570050c8a6b01f50d95061_JaffaCakes118
Size

41KB
MD5

7839dc8c05570050c8a6b01f50d95061
SHA1

026101c530791a67635170aa2ac12a7e3700a8c0
SHA256

d998ae8f21ee507bc87e3443d5a67cb1dd7892e23d1f2bf8dfb8cc5a3c9300ed
SHA512

794f91ef4423d7d898114cf637ece57213c4713b917d30d7415883c35926386e95a3fd84f8066ae6c5b9c42023f9ba702eae9453475a2a4f3ca77fbb98258d36
SSDEEP

768:vUlVJ6TWXkMFSNfjrjeL1ioNbXAgDcaSppSSvgYLuvCX:gkECfDo1XAgZ+pbvZCvCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7839dc8c05570050c8a6b01f50d95061_JaffaCakes118

Files

7839dc8c05570050c8a6b01f50d95061_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

upx2
Size: 858B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ