afed3174f671f7822773031414f8f386_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afed3174f671f7822773031414f8f386_JaffaCakes118
Size

28.5MB
MD5

afed3174f671f7822773031414f8f386
SHA1

d10e081e0b649333800b12e9235a7b7f188ad0d5
SHA256

eab1e13fb0b6384803dc70ec014720a901990a18870602b37bf6dc5f2cbc938a
SHA512

8bb861599edffd86f2a58c62dcf56e5fab9572e8b316d09a3abccfcdb5e90c4b249bd1384bd93123bdda2feff00a27b2148d8cf539fcff1656710c8cd13b1835
SSDEEP

49152:QRo04yM0SHkA+DFplmBTr+0pD4j4Nlc7kFRT97pEGcPZSuo6299KRNyvXC+ITl:QRENgkFRT97yGcPBo6299KRNyvXC+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afed3174f671f7822773031414f8f386_JaffaCakes118

Files

afed3174f671f7822773031414f8f386_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28.3MB - Virtual size: 28.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ