ad5b6e1d5b263f43d6812522970966ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5b6e1d5b263f43d6812522970966ec_JaffaCakes118
Size

44KB
MD5

ad5b6e1d5b263f43d6812522970966ec
SHA1

b2f33e53734c401618b49506f9f788b4dd7b8587
SHA256

acb9c07eb41c61d782565ea567ee208f6526e190bf254ac2378a6985012595b4
SHA512

1ca659c7b1f4d0a651fd47db164a99353508b267f997f9cb6d314d443416c49243cb5477786f43377fef66a709a722970fe4dfda4ac8458b4588252b2e5fb3fc
SSDEEP

384:8GtiKicpsnKpuDkM31IWPOihLukT9YwK:8GtiKicenBFIo9hLufwK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5b6e1d5b263f43d6812522970966ec_JaffaCakes118

Files

ad5b6e1d5b263f43d6812522970966ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ