cf5142894f607925eb0dd7d5fa1925fe_JaffaCakes118 | Triage

Sharing

General

Target

cf5142894f607925eb0dd7d5fa1925fe_JaffaCakes118
Size

116KB
MD5

cf5142894f607925eb0dd7d5fa1925fe
SHA1

08ea7052bce9a6e257ce8682dd26214829fa41d9
SHA256

612e3cc210d417a21f6ad283c2870bc03747b3020df32427ad607323a2c6eeae
SHA512

50cc545121cc42fe2e07053f67a035976365f2564f81577cb58c7125a3ec225c0e05a8bc40acab5ea39f945a135ba7af21346a62d62aa897aa21c4e867d6285e
SSDEEP

3072:AuWBsnbD+UQNALIqPGXPM3UcnDxV+UcAJJ:iunbD+RNALIq53UcT+U/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf5142894f607925eb0dd7d5fa1925fe_JaffaCakes118

Files

cf5142894f607925eb0dd7d5fa1925fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

t89qhmpa
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xsal
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8pto8ats
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE