939c309997065db00689a7d63a9878cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

939c309997065db00689a7d63a9878cb_JaffaCakes118
Size

164KB
MD5

939c309997065db00689a7d63a9878cb
SHA1

af4463422fc7054bc2c8cc452ca2f6d9193fdc4b
SHA256

063b267ab6aafdde161ca4fb95cc310349558f6387b9564206464210bf58cc94
SHA512

7c07de3f4d14953277f9add2316a4a485ad1438ddac32322aa185da63c46a5395cd497d18b25e0aa95eaa2e7b56954ccbfc46735f77230e7a59e83d02fd8bfc6
SSDEEP

1536:LDCH+K91Ueb7Nd4LM1Y8Da55XtK+IFCD0z0eyzgu0VHAs:aH+mUoL4lH55XtxI0D0zkgusHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
939c309997065db00689a7d63a9878cb_JaffaCakes118

Files

939c309997065db00689a7d63a9878cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE