b327e5444c5dbf593c876e6a31665596_JaffaCakes118 | Triage

Sharing

General

Target

b327e5444c5dbf593c876e6a31665596_JaffaCakes118
Size

9.4MB
MD5

b327e5444c5dbf593c876e6a31665596
SHA1

28ca9cc0b3ae2a7225a7a2a54a3da5853daa240a
SHA256

c98129fe4949ddaca5b4ded4b2e554e33f434a916c8a93de248f8d701306f42f
SHA512

653a4b5db215b8a7d11a98483b3de2461402614b36e6aa2fef4fca2ad331f60cb8d6449b92a4f37c3487c92e8779d9bcb4e0988281e651045cd01b3cad8d8308
SSDEEP

3072:9qNR3V7sQ7nM3qIFqbpM3MxkMdY7caHdYmbhlO5bp2iS91PMh4WpL3GfPryW3sb9:9erFJOIplgcaH3SVGMhjL2fDyWvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b327e5444c5dbf593c876e6a31665596_JaffaCakes118

Files

b327e5444c5dbf593c876e6a31665596_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9.4MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ