cec13bd367c5a6cb5b67972487be1a55_JaffaCakes118 | Triage

Sharing

General

Target

cec13bd367c5a6cb5b67972487be1a55_JaffaCakes118
Size

645KB
MD5

cec13bd367c5a6cb5b67972487be1a55
SHA1

656b94cf4105130c8899d82d959b6792d22a9a50
SHA256

ead6d9bb8a5c214bedba49057070b30858a4b4b93410e9e1fe564727ffb39ac6
SHA512

a77a2befe6d48faf6b80db8012196fc730509780d0065f2d14db9b5bdbe235f77a95bbf9d3d247e9965dd50ea997b8e5571416a57b6468e14b1ad7aed90e0a5f
SSDEEP

12288:/2qS6KCDZpJ2ni+0XhmSZV/39ps/H9tOa2Sh4SbByqB63WaXFtXGSMcCRO+qx:Y619wq73A/fDh4SQE6GsFtmcgfqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cec13bd367c5a6cb5b67972487be1a55_JaffaCakes118

Files

cec13bd367c5a6cb5b67972487be1a55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.-PEP-
Size: 13KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TRIAL!
Size: 466KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TRIAL!
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_MEM_READ

.idata
Size: 195B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ