cec80f09779c7a24bc83c854ccefa64e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cec80f09779c7a24bc83c854ccefa64e_JaffaCakes118
Size

599KB
MD5

cec80f09779c7a24bc83c854ccefa64e
SHA1

0a0e30eb67d8f119786540ed22e6c906f0c050ff
SHA256

05f0ef05d604fbcb04fafef8680ebd89a4d8b75a3814174327793ab4588b5007
SHA512

f8075cb2afe5ab33f842f18bb95cdc7fa4356ced1d3fb7b4eeedd8804dde050d40c2658d10fe01f493c5c91a45e5fd32621d5e2ff2e4767baf635a79f923eaf3
SSDEEP

12288:H2ohjWJ+kecleG2GucsLC1qNHbSx6awDriju65oS9:NTkPB4NHVDWua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cec80f09779c7a24bc83c854ccefa64e_JaffaCakes118

Files

cec80f09779c7a24bc83c854ccefa64e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

KuNgBiM
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

KuNgBiM
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

KuNgBiM
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE