b688c4afb38bc542083d62abb589c1ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b688c4afb38bc542083d62abb589c1ef_JaffaCakes118
Size

342KB
MD5

b688c4afb38bc542083d62abb589c1ef
SHA1

b85ac9b526bb39a370c8f1181ab85b104bfe5423
SHA256

a42e32e310b691a9829e58d3d053b1a4620a0e24a84fea7ac450b989f1b6b20b
SHA512

43596dabe6733020ac0fcbcde244a831b90f9a86073a8194c4e965dd57bdeffb6dee7ad8c0f2606a512c5d03f491dc9fe544bf0070e6d81b042006cd64789460
SSDEEP

6144:VJvViKF3315dzF+qRXgQ7JOmGf+7vpe1pT5OMv1KoZm0cf0jMwebHfvD:V1MmNF3gyOfw41njm0cfUPeb/b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b688c4afb38bc542083d62abb589c1ef_JaffaCakes118

Files

b688c4afb38bc542083d62abb589c1ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: - Virtual size: 877.0MB

.engine
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 327KB - Virtual size: 328KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE