a38c2d787199e93d6c5459f11aaa7790_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a38c2d787199e93d6c5459f11aaa7790_JaffaCakes118
Size

125KB
MD5

a38c2d787199e93d6c5459f11aaa7790
SHA1

bbdc7e682ec73c269cbff18b41ab75d26d5b786c
SHA256

edc7178e9b80188d9b71b2e7231fb3669bbd2053222cc151aefff49d29aa673f
SHA512

3fe0a77b2efcca899d30ff5e57bff06730fbea8fb53c08c6e4eee802642136e82761bcdc3a7689b5893d6773647facdaf85d781442ce080b3bafa7b031b02f8f
SSDEEP

3072:/O87OWo67ZVNsB8R3wtJEhnVw6QqQxOQesMxvGl1:287x9eZJWViqGlesMNU1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a38c2d787199e93d6c5459f11aaa7790_JaffaCakes118

Files

a38c2d787199e93d6c5459f11aaa7790_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

i9k
Size: 3KB - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dtm
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tw
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE