aebe58504699752cf32d92187b81f71f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aebe58504699752cf32d92187b81f71f_JaffaCakes118
Size

519KB
MD5

aebe58504699752cf32d92187b81f71f
SHA1

93be0be5af9995ece2c416ebabee0d636830f79a
SHA256

a9c5a0a0122d7c36f4c16b77ce2379b196f6e24c319d9c379aba57c5bb45d33b
SHA512

636e254abaa30ec7a85df1c560d16dcb7c6671ded41e71c41e3748d077caabf4ccb5b718e967e591913c0ef3de2b4cb3d697048c14213002a41fba6f09f968db
SSDEEP

12288:MlMYZlzswOtgIvrqU+Dg6xIjZwqfmwr3VmR/:8MEsZgAORDgtZwqeGVmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aebe58504699752cf32d92187b81f71f_JaffaCakes118

Files

aebe58504699752cf32d92187b81f71f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bifserv
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE