8967660049d96af29001b4ff88865c05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8967660049d96af29001b4ff88865c05_JaffaCakes118
Size

701KB
MD5

8967660049d96af29001b4ff88865c05
SHA1

9cad38c5d010018172df91e20466ca04745a284d
SHA256

350825462dbf7c955c002f5abaa9b4cbdbb6583bbfa6197225b0c04a95ac8ce3
SHA512

296c6f134e9d4b003c79ec37c40f686775559b1ce7bab6e4287f0a5df4d615a3a5629fab6951d520320b0e3734ef6e42b8dc1fe5c89fe00e2abfe24f9a0b8328
SSDEEP

12288:BTdEOfkEcHycmra7m9F4VjyDtJxAQSHMTUCkZ/4HObYDr1HKlqt4mTa4ee:NCzEzra7ekj4J6Di4wHrr1HKlpmT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8967660049d96af29001b4ff88865c05_JaffaCakes118

Files

8967660049d96af29001b4ff88865c05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.xAYXcsM
Size: 625KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.5HjZv7T
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fu<%3_M
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.&Zm<G,!
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.I/t6E<n
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zBZX.BA
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.M[|{jvU
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

./Dwny^.
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.&Zm<G,!
.5HjZv7T
.M[|{jvU
.xAYXcsM
.zBZX.BA
Dwny^.