87ba90b988ed2d96bd85f327476822af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ba90b988ed2d96bd85f327476822af_JaffaCakes118
Size

356KB
MD5

87ba90b988ed2d96bd85f327476822af
SHA1

44618cbc1d0a216effe77cfd439b2f8e7d938053
SHA256

41fd2a05dea22b0ceefd48bd385451c6f126dcaf4e81f90b9ed784375586992a
SHA512

bb482110a359070f5acefb95f678fe9be4bf6475cb45a263903d0035e350118aac5a5097d9e4f39d0e87b7ad6f182751e0d6ff3c85f14719288efd482c71e301
SSDEEP

6144:FkVTQ9fNIq/SRbF3h3CnDUYyYF3paaA2LPp6TtUx2syIpbKbh0E+s8axKdOgf:FkVT0IqqRF3QgYyYF5dAKETt225Cbsrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ba90b988ed2d96bd85f327476822af_JaffaCakes118

Files

87ba90b988ed2d96bd85f327476822af_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:~
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE