cf364bf69e0bc8432ee886f02fc1d566_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf364bf69e0bc8432ee886f02fc1d566_JaffaCakes118
Size

216KB
MD5

cf364bf69e0bc8432ee886f02fc1d566
SHA1

300637386994f66bdd9d33786f4dcca22a21bbb3
SHA256

6299c091d9780422c56c38ef0f019d5fc701265d29035c3253961921999d2b21
SHA512

a6ed05fd9d89e15d8b17cd7da2a4aa1efcc4898d74c3f6c2362a4863c038e0124a757e5d51de703da0275fb8fbb5385446034315dc82c2bc4f0ff248c4bb81dc
SSDEEP

3072:IEWDUuuzPx+c4p75lBPfqCCw4zI7HNbzG9nfA78f6aa/yiWji4fKwtkW7DMi:8YuuzgcU7MUHNH2nf0l/yiWjnipWMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf364bf69e0bc8432ee886f02fc1d566_JaffaCakes118

Files

cf364bf69e0bc8432ee886f02fc1d566_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE