ab0ab07387ed8e30adae6df2786d41a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab0ab07387ed8e30adae6df2786d41a4_JaffaCakes118
Size

383KB
MD5

ab0ab07387ed8e30adae6df2786d41a4
SHA1

64e750a351990103ef3331d823fcb268dd247d9f
SHA256

37554b91d399ce7965cbf883e36b5abe151786841cc374b3dfe451b8bd155889
SHA512

7c8166596889988810dfdcbc92353afc5b6f1c734a74a5904f750a69fe9a675aab8899581c9ca9e1e7f599247b00cddf4a4163e65aeba9b989e80d836bf1fc7d
SSDEEP

6144:W5JX5IgHLkGNBQ1nG4pIClgpHNYOLksjnnP0+PTPdAn+q5LwELzL+Xn:Wv5LX4pIC0uOLksTPNrleeELz+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab0ab07387ed8e30adae6df2786d41a4_JaffaCakes118

Files

ab0ab07387ed8e30adae6df2786d41a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��a
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�&��
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE