c1d81806675eb2e95344f1c17682f2a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1d81806675eb2e95344f1c17682f2a9_JaffaCakes118
Size

216KB
MD5

c1d81806675eb2e95344f1c17682f2a9
SHA1

440c54b2b951d66a51713f0351f50ab73d7289d0
SHA256

bbf88d5f54b90e79e7ef5e8070b3e98eb550beb5ea2f04d8b8ed31c5ba4d157a
SHA512

2d231afadcd107167ca709484dbf6f8be8b84e61029657fe3e20c736d94d3363d4ad2cacbc7a054c51cbc18a1e475e74eefa7f3da98082a7e24de96747ddd677
SSDEEP

3072:l9DtSoETWAFNW22dxuZ8YQNoF1Sy05Go76HGvml/f97Skhc8j0Le1v:xSoVAFNyz5YQojHfl/bBv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d81806675eb2e95344f1c17682f2a9_JaffaCakes118

Files

c1d81806675eb2e95344f1c17682f2a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vmLSy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ