879497e48c666293fbd516631bee32f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879497e48c666293fbd516631bee32f3_JaffaCakes118
Size

997KB
MD5

879497e48c666293fbd516631bee32f3
SHA1

950edd27ca22e30edfbec262260e83c1eab0d8dc
SHA256

4240ecef522b295386b588f525d24d94ebe516d84d726c9cba2d3daa0ae3cbef
SHA512

cdf8a1ea3884584869566049c2a679a894e6a043487c306551d64466ccf6f63c90abdeb89a410740b724148afd2d89fec4bf6d75679e36311253757fbdd141c5
SSDEEP

24576:HSttQQ5ZI7dFNoS9lFHMHgoWTxdKep56vgM+51ocpNvZ69R6:MBGdFiqluAFTxdKepUvg15mcpi6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879497e48c666293fbd516631bee32f3_JaffaCakes118

Files

879497e48c666293fbd516631bee32f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 809KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ