cf0671b25f3173cd487ea4a99cc93eb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf0671b25f3173cd487ea4a99cc93eb2_JaffaCakes118
Size

273KB
MD5

cf0671b25f3173cd487ea4a99cc93eb2
SHA1

52e449f847a9e260c2f6a319ef791189f60d7630
SHA256

2bfd5982b9116906804622f8b218af9d98a95e248aa61e6abc33ee0cd15e1ff2
SHA512

6bd8765bb01e6928586955ff7b8034e1b79adb2946f6a1bde9eb705f48b57388623656b42b5248f656f09e9c29b654a8fb2ce71cdc72424323013a1890946667
SSDEEP

6144:JNO7k9DU3hl7aPPS7bmccAZ7klHc+YhJjm841FMpF:JNO41ihwS7bBbJjm84O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf0671b25f3173cd487ea4a99cc93eb2_JaffaCakes118

Files

cf0671b25f3173cd487ea4a99cc93eb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 221KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ