c78d6776138785f0387e2bd07b3849ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78d6776138785f0387e2bd07b3849ac_JaffaCakes118
Size

469KB
MD5

c78d6776138785f0387e2bd07b3849ac
SHA1

ba27bb061a001a2a62ea2bb4bd1b4bd7cad45cbe
SHA256

4fcbb6ed1883485cb39ee58fe3e04ab5c25d93afbda5a536abc52a1348f0b1c3
SHA512

92dd9c497653843a178ba35a946b5842fe74f1f9682032940517165ee87e6a268fa4ac5405a25fa5776c91fcdb299d45fe45b0626720ab24aaa42a058fae9635
SSDEEP

6144:sF48J519B62g/p1E2/eQAovC7KlMzn9d14OeFwNXUxlT/azBPq3AajCiteTVbLTJ:sF48JH6jf9/e2kK+1wFw0uPwdNU4Pi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78d6776138785f0387e2bd07b3849ac_JaffaCakes118

Files

c78d6776138785f0387e2bd07b3849ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16.0MB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE