adf32bc576094d0876316543e0ed5b11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adf32bc576094d0876316543e0ed5b11_JaffaCakes118
Size

370KB
MD5

adf32bc576094d0876316543e0ed5b11
SHA1

9ace63d5991a072b3014601b6ec0488f81bc9cdb
SHA256

8db6f498e5c2d68650561fa07759beaabf474a49f0a494ffa7cb6887297fbf53
SHA512

e34869ca2fbbf5be6620efdd43a712769bb457e72850ae8d3b5756874725dcae4f4d95de40b77ffe193a70b02a64aa8ff75bb9ff433227113d6e141d548f2af6
SSDEEP

6144:EG08g1EMbeBnrv7ofGikidSeRwJEc/ea/EtHdWStjneZ/79r14OJqRX:vg1ERBrvkf7seRgV/pI9WStDeZ/7J8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf32bc576094d0876316543e0ed5b11_JaffaCakes118

Files

adf32bc576094d0876316543e0ed5b11_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE