973f42f5466cc87683bfa9f923b1bdc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

973f42f5466cc87683bfa9f923b1bdc4_JaffaCakes118
Size

623KB
MD5

973f42f5466cc87683bfa9f923b1bdc4
SHA1

f76622dcb57234a99962d8e0eefb8b648d9cd32a
SHA256

d85cca8b85b514f56de694397144e97281f8a786d1ce55c797531231b29c3d1f
SHA512

0f9d36546e962eac6213f18d86d5891b030bf6e8db1fe569f8dbb7192f1723ef379807210ba49d2e279b2b6ebdba1c10d7d2b761a1fc8723f032460fd16403a8
SSDEEP

12288:Ra31lfESfli/M2Ke8Hr7ieXvlJd0r1NSxQ:RazfI98L7icvlJcnSK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
973f42f5466cc87683bfa9f923b1bdc4_JaffaCakes118

Files

973f42f5466cc87683bfa9f923b1bdc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE