ce38f75db126ef1362dea4dd3460cbe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce38f75db126ef1362dea4dd3460cbe7_JaffaCakes118
Size

94KB
MD5

ce38f75db126ef1362dea4dd3460cbe7
SHA1

2427dd876d3ed33a3ac981bfc6962a0d910abc75
SHA256

36c8a5bdb5806df5615608956d124607f67d504f4b4d740af157d6f5d208a6cc
SHA512

fefd16c06ab56633c4dd5c59d2e7e95856fd1275f96e1e15a0aa96db756278d6e12fd2dea22c0fe12d84a5f405912280e1e2a8fced0e9133d6c0fb347475a69a
SSDEEP

1536:hgDQRnx6JuH2js2nzhl31VXsrNIGw61DZAtCXUC:3txgSosaP3UrNFH6wN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce38f75db126ef1362dea4dd3460cbe7_JaffaCakes118

Files

ce38f75db126ef1362dea4dd3460cbe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ