b8f53369c34a3481c78efdea40e17647_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8f53369c34a3481c78efdea40e17647_JaffaCakes118
Size

451KB
MD5

b8f53369c34a3481c78efdea40e17647
SHA1

c451cc6dc43127630b73ebba4099ef3266dbee88
SHA256

1598847d87e8811c6adfffe46b93413b98fd27052af03a4d8f0fd8801ec1343a
SHA512

581e18e598a1f67c39f09cd458a618329cf0540a1f7fe69ced97c2f28c8a6d8032c05978bdfcf135d7c5f731a36e08f7da055f5e1a85d3041373de1919aa5662
SSDEEP

6144:UYmhAfPkPBito7Pr7Op/lyWd2lQjMLnryQmaNh2TOql2FTSuspvyfnFpik+ORTeH:hmCfZMHOprXILvyt2TSFpQFpikVcaGTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8f53369c34a3481c78efdea40e17647_JaffaCakes118

Files

b8f53369c34a3481c78efdea40e17647_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 418KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

and
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE