c265cb26df623d3cfe20b706e2779797_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c265cb26df623d3cfe20b706e2779797_JaffaCakes118
Size

161KB
MD5

c265cb26df623d3cfe20b706e2779797
SHA1

c808b80bf9e174a008ef01a557f22ab4d6865b92
SHA256

ca991168891fba2a4db43ce903f57c55481d5442b815d2d05f878db14bfbd920
SHA512

156c8ee471803fc73da698050aa85fd72f10504a1ee93050012f2d807b3528fbde413d6911e173a0d423f0f317dc88d69a9af31a35dcb0ced6e5c5e99760d780
SSDEEP

3072:XjxsRhjMdo0np7Bv2fQxZq7USQl6MdP9FTuhYszJ/w9tb/R0rq6ecbi8fRc:mCdTBOj7gYwFTuhYGJ8tb/R0rCci8fy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c265cb26df623d3cfe20b706e2779797_JaffaCakes118

Files

c265cb26df623d3cfe20b706e2779797_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

F4U199
fweerthrtgr

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ