b11bfc688884d70db79cd5bbca3f294c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b11bfc688884d70db79cd5bbca3f294c_JaffaCakes118
Size

33KB
MD5

b11bfc688884d70db79cd5bbca3f294c
SHA1

28c43809335bc34b900262872865a41550bfa86e
SHA256

1c6d0c2701f29e27cb2f92aa9dc6322fbbe5849543a4bf4b74fa151d5970fb66
SHA512

ac1705af63c7d5ea67f00f8e32bf6af29ed3d99477ee71bb9b2e76d59e65b6fca6ebecea5cd3c7050204c5552320c811d6897ba54ff2aca9a86c4014101dcb08
SSDEEP

384:/ihdtPXkVRdIMlD9DKLz8btaMLtlPKL1q+Ddf6iZgWR1ikxXXRfo/ULvIHrSarlf:IERn9DKLz8JZPWjikdXR4ravUjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b11bfc688884d70db79cd5bbca3f294c_JaffaCakes118

Files

b11bfc688884d70db79cd5bbca3f294c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Createdu
SetvaFojaXy
Removebu

Sections

.text
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ