85917b42e9406ca32c326e9e585ccce3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85917b42e9406ca32c326e9e585ccce3_JaffaCakes118
Size

470KB
MD5

85917b42e9406ca32c326e9e585ccce3
SHA1

bc670de80dc6ccd021535c4892125666e2848ada
SHA256

8ed6f8c7f8106b5dc4fec5b53147c1edafc31af1768dfa47cc4995393bc303cf
SHA512

c702d11e12394b81767471354356e90ec7aa250a16ff17ab8998fe7c51e97070c5b5174ebee8c14f927b3a00a8e8a12194bde24b56dd354c0d0ef805ce5d37af
SSDEEP

12288:qe5nmSfMg4PcxsdEJC+gHxzecGMutYyWvJ:qe5fN4PcaHxSMQovJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85917b42e9406ca32c326e9e585ccce3_JaffaCakes118

Files

85917b42e9406ca32c326e9e585ccce3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 899B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE