cf67122df70e140cded43510bc30a469_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf67122df70e140cded43510bc30a469_JaffaCakes118
Size

97KB
MD5

cf67122df70e140cded43510bc30a469
SHA1

92bbad441ba59b5ef9f0f65d40d6b0e914123e4f
SHA256

447fe1559d998544cd07e10987af52dcb9a10c4a86e0cd68f027de25ea3a8107
SHA512

63e6798447d1b738409a26117c54ead2472130c57ff53374f455bc407698fbc2011d61d16b34649a77535351454646bff647c9309e459a8b85c64eef184fee7b
SSDEEP

1536:thZqOsnzLlnUSpylGpmcG30ZSpMNc6/MyCUYMSaGsr9sDRh4q:3ZqOsn3VJglGpmcG30ZSOPGnsRsDz4q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf67122df70e140cded43510bc30a469_JaffaCakes118

Files

cf67122df70e140cded43510bc30a469_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dfsaewr4
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ