cef22abe8254af8ba878e50c3089f4ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef22abe8254af8ba878e50c3089f4ae_JaffaCakes118
Size

144KB
MD5

cef22abe8254af8ba878e50c3089f4ae
SHA1

d624ac889df05bc3d92bed0e2166828a20995d06
SHA256

b17790ce41649eb9a44951e3127ebf21e7b2db91ab35e83c2ca4698d411561ff
SHA512

99eaa8de31405df63685330587e7cc3ec1f3b4c570a17e5c849954d19f6568360ca53a288d8d9c2f21bb112817a7f6263701e353f65c8750c50a1985bc9901ea
SSDEEP

3072:q4+zAZgpYOG49pUSuXQUPUSes3Ll0bawD9NBuT1C3vUkcN5YiuukEk6V:q1zAZEp9pUFVg9XuT1mvUke5Yir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef22abe8254af8ba878e50c3089f4ae_JaffaCakes118

Files

cef22abe8254af8ba878e50c3089f4ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ