c805db02952e8ebea1d9f14f32f03532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c805db02952e8ebea1d9f14f32f03532_JaffaCakes118
Size

458KB
MD5

c805db02952e8ebea1d9f14f32f03532
SHA1

30bef311d540dedb0f5b5cfd93812c26fbb54977
SHA256

dc2a265fb96aa0ac99f49be86c69a1e9067676d07541d93feaeead9bc5724df4
SHA512

17018a9f3462d903ceaa213398c270cebc3da73e804d9d185fe8184b354f1675eb5e5efa43260c8ccaea14abeda74cdf68634686427634c8fd25e74f78f51c94
SSDEEP

12288:EZs18aj3hz7fZD/vc9yCVYR5PeRUlU4fnvAIEGHp:Os18aNf1nc9yCq0qnv3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c805db02952e8ebea1d9f14f32f03532_JaffaCakes118

Files

c805db02952e8ebea1d9f14f32f03532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.nyjgqo
Size: 2KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ynwbji
Size: 47B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.syniju
Size: 445KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ