cf5496f5ff013ba7b38ec9413f68b613_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf5496f5ff013ba7b38ec9413f68b613_JaffaCakes118
Size

14.5MB
MD5

cf5496f5ff013ba7b38ec9413f68b613
SHA1

9dcc94e37ba6173a58df39ebc83eab7616f8af34
SHA256

555ba49459d863274e6c009c682c4e72da6bb1689bb51fc07d5b8cd279ca2f30
SHA512

302753a3ff989e660c75d7a046916e8e72c2621b9d62518fd78046fa15dd2638a4c615fc262e2a0d88b65022c41f7e67a2bbc8b0b3b8d28f22ab52c40730b304
SSDEEP

98304:jGPhEmw8p7FpQGNGdy2vIZty10YfIc+H60bEEEEEEEEEE2EEwEEEEEEEEEEEEEEb:jmvw8NFWgGDL09c+N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf5496f5ff013ba7b38ec9413f68b613_JaffaCakes118

Files

cf5496f5ff013ba7b38ec9413f68b613_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE