c291dc1e9d14b73212ccba6293c10a5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c291dc1e9d14b73212ccba6293c10a5c_JaffaCakes118
Size

2.2MB
MD5

c291dc1e9d14b73212ccba6293c10a5c
SHA1

68b22d5507a7a9979c3d47c20ed309bf5848a317
SHA256

8a1d823f42e28b7edbf334f66bdd33d355413de098b9cf0c401b34218dba252e
SHA512

1f20539bdb60cb716f6ecebfc44690149b42da262285aa1a6d76667ad951defd69fb5cccbe7474c57e8bb37acdb31a640384c74e89681f9f324c2f77fe9a30e7
SSDEEP

49152:zBloYZ77SR0k7mjoCxqz2pl+CZPB0zr9ycOjyeZJRi0T:zvo0/pjXzbZPBye2kX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c291dc1e9d14b73212ccba6293c10a5c_JaffaCakes118

Files

c291dc1e9d14b73212ccba6293c10a5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 120KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fhjfj
Size: 1.6MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE