a7bfd0214e6ffe1665fcbf548d2028f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7bfd0214e6ffe1665fcbf548d2028f1_JaffaCakes118
Size

816KB
MD5

a7bfd0214e6ffe1665fcbf548d2028f1
SHA1

fcf17485c993630eb821a5b6b9169147a29d8444
SHA256

a5ed0e070d0a7e3a1460243d782e2b266031978720c598deb37275c49b49956d
SHA512

1e1a19ad8c4325241c9d4cd7089be82f35af1f60b175740b1d1ed9593b213b42832e42c8cb44ea8e8cbce33bc9fd78c9f354551c61004ba65e4d792f6bac41d4
SSDEEP

12288:6H/GXgymsGaH6NxsuN7pfC5hH22nIZroYYngbanDkqu0n/jB2hYVAz2:+uXgXJN2x5N26kCgu4JyzSz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7bfd0214e6ffe1665fcbf548d2028f1_JaffaCakes118

Files

a7bfd0214e6ffe1665fcbf548d2028f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ