ad212b5a5a8cc963510e30c44867c309_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad212b5a5a8cc963510e30c44867c309_JaffaCakes118
Size

138KB
MD5

ad212b5a5a8cc963510e30c44867c309
SHA1

5a943ebde28cf91741be45aa80a1ece4229a3c92
SHA256

3b9e4817934b1f2296b30cc59291fcc6fd357aff517e0d6d46180bba43ddebfa
SHA512

cbdfeab1c74aad027d0bc47ce27e373ee83fe3576ceb30b12a47ea5d6d7043cf8285cd73a2269704c4d0054456b2b62c36f6972685a33fd9b3cf04b8128cec63
SSDEEP

3072:IEWDUuuzPx+c4p75lBPfqCCw4Ki95WvSsLf:8YuuzgcU7MTORj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad212b5a5a8cc963510e30c44867c309_JaffaCakes118

Files

ad212b5a5a8cc963510e30c44867c309_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE