c807e7d6d27ba0881efa183c3eeb64d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c807e7d6d27ba0881efa183c3eeb64d3_JaffaCakes118
Size

100KB
MD5

c807e7d6d27ba0881efa183c3eeb64d3
SHA1

427cebe85e5b777ac5d864d8e4874e2cdea5505b
SHA256

c9aaed1c4f866d998196ccec5da5e8aad556cb59ba4f391f59aaef349517603b
SHA512

464251064b07e4a442437d052855680fa7977f59a514d4cbc91722c311f20e55f59a3b5de4b9b0f6f56a5a0723ffeada7b05a523802deb4ead2e19fc2ad23258
SSDEEP

1536:P+R2kHSWa/hF1IygvLZUkeiOk+g1z24iMy:MP3ULKygvLZYHgCM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c807e7d6d27ba0881efa183c3eeb64d3_JaffaCakes118

Files

c807e7d6d27ba0881efa183c3eeb64d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbbs
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 88KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ