af9991fb19b90437291d2bdef3172ef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9991fb19b90437291d2bdef3172ef3_JaffaCakes118
Size

892KB
MD5

af9991fb19b90437291d2bdef3172ef3
SHA1

2ff00efb1b8f8798ac2e12612d4c99bab6ef79b7
SHA256

e84c39818a96876605080843369536a897b797a9b3181c9f03f70bc72428a6f1
SHA512

f5189491a96a8c013482b85f35110a7a4cf32c9baffb52681753942a71cd42ee0c318dcf794a714a71e028b70aef50b987542034c761cc317abe3f8d8b2a6f5d
SSDEEP

24576:N3FNP8NWhAlGE7uZaMjEd1+C5lOE3sgFff:N11BAlXim4OzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af9991fb19b90437291d2bdef3172ef3_JaffaCakes118

Files

af9991fb19b90437291d2bdef3172ef3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 80KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 800KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE