ce188736422df45d6e429bff5b40e86f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce188736422df45d6e429bff5b40e86f_JaffaCakes118
Size

358KB
MD5

ce188736422df45d6e429bff5b40e86f
SHA1

c302b99d1d94ca01d276beae6ec65461864ba537
SHA256

5c66e911eb6ca023f5991092adcce2ae79c98fafe252599b6338a916807e1f70
SHA512

b77001a2e777c81f07e81860ec97deaf65376a22a43f217a40bcb62bf79a0c1f6b08c8169ccbe7f93f34ca3ac1872a2945f44156a04e94f406f5ce75e3bfdb4e
SSDEEP

6144:hAu41feIraql4gm5IJcqQyebBf1mAMUNetf8heOdkAmI6cu0WVJQm7l9EIac:euefNaqltcqNebxEAtN0f8heGgcu0GQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce188736422df45d6e429bff5b40e86f_JaffaCakes118

Files

ce188736422df45d6e429bff5b40e86f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 214KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YADO
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YADO
Size: 14KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

krypton
Size: 74KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WWP32
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE