b786af9482f0231e5e50e363327b97c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b786af9482f0231e5e50e363327b97c0_JaffaCakes118
Size

747KB
MD5

b786af9482f0231e5e50e363327b97c0
SHA1

344b99bf853cd235049026059c21eb18880f2807
SHA256

9d086214e3d4d46eb2f22488d7366618c34598d17fdafeef48c07873c10c0995
SHA512

14dd29d6a7a7daca4f5174ac9ba1d8d963883bc7f5b321980c377d7536af20c858981f590445412ba2a509ffdc98f0155d7a85e4ded492725a25fbc2c02336ad
SSDEEP

12288:8YBzgc7WC5iPH/kjW/YXzT2yB9qHgRfoInqytUElzhdvyk4j/jS:8Ugc7Wys8jWKzP/forytRBIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b786af9482f0231e5e50e363327b97c0_JaffaCakes118

Files

b786af9482f0231e5e50e363327b97c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE