8751031c1826479d8eb8c023669c4251_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8751031c1826479d8eb8c023669c4251_JaffaCakes118
Size

151KB
MD5

8751031c1826479d8eb8c023669c4251
SHA1

09f2c7bb952eac890ac15c23b2025b0ea832165e
SHA256

0742bae3687205737b270d65ebfd9408f863465673b24d7c5e36f40e3d5ac042
SHA512

c2fe736f630d456a82b60fdfa713c2d76d94271f9e8fe6947d21b04b40ffc0ba234616dd2a999306155106ec0ba281b4edc7f398d22c4ee29ed617bc898c2d38
SSDEEP

3072:TRgpbgISMz2cLfHfgJwlTvtjdrMbK8O1azOigehTQOikw:T6lgUKcLfHOwJF5LZ8gI8Xk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8751031c1826479d8eb8c023669c4251_JaffaCakes118

Files

8751031c1826479d8eb8c023669c4251_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 72KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE