c1fa3c3f388d106f7c6665e0c3597d77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fa3c3f388d106f7c6665e0c3597d77_JaffaCakes118
Size

159KB
MD5

c1fa3c3f388d106f7c6665e0c3597d77
SHA1

e05806518f4d84c519f0444716b553bf9e8997f6
SHA256

32cfd4559389447bfb41bd673d7604fc43ef9b5af861b50da31a132af36053e9
SHA512

615f98ef678754f6ac8fe6c41bd652305bf686ce56d163f33a7d089cad014f53d21028ad3b065cfc44f6b3111f8faecfe93d9a111f9e7f1358545bb733e92a71
SSDEEP

3072:BO4nDbfagCqKZk5yY/UWMFYyY71QtWrPdjbfhr2yMyGwRu/W:s4nDWgRAkPbMFseWTdjbfhsW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fa3c3f388d106f7c6665e0c3597d77_JaffaCakes118

Files

c1fa3c3f388d106f7c6665e0c3597d77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t�
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.acta
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kauaa
Size: 149B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ