a63c8e44963a8432d386fd5cc2d245d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a63c8e44963a8432d386fd5cc2d245d1_JaffaCakes118
Size

376KB
MD5

a63c8e44963a8432d386fd5cc2d245d1
SHA1

b2e9d567dc5f5f6105bf3d5c6c52ce2d1a9bf8a7
SHA256

45d0fcd2b84ebd5c21d89a534a9533fb1fcfe11f7c245c766406bf7deee4a104
SHA512

baf9ba73f63b7c5243df351c0809782ba170cfcd3d93f41d84eba0e6abe80649a341d059773d01d77acb76639d334a82372d89c4c581b5b94f710e6dc29cb91c
SSDEEP

6144:DKJYAU9BkVmhNJckSRT+ppqNhDccdVCZ/wtqhrxquPAvFumI/dpehs0Kj4F+:mCAU9BEu3ck0T+ppqNScdVM/51YoAvts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a63c8e44963a8432d386fd5cc2d245d1_JaffaCakes118

Files

a63c8e44963a8432d386fd5cc2d245d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ppam
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE