cf60ba5878af6bfcaa8788cb2da32d57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf60ba5878af6bfcaa8788cb2da32d57_JaffaCakes118
Size

29KB
MD5

cf60ba5878af6bfcaa8788cb2da32d57
SHA1

0e299330afae2c5ccf4c31cd0c0d5bd063cca9b4
SHA256

55ddd35d318f49f36d408bf1c620fd44f12d6c8eebef833c0834eee22b020c86
SHA512

fe1c77d98c9ece920b73ba1f80d5b746da9fdf4b48f76873ab21372bfad90ad29a1b0e87b488edf9e3536572f263a40cfc5e88fddcb95c2a07c574e5078e5538
SSDEEP

768:VdLYrbYvy7ztI1C7ZbSbWPueKsBguhdubV8omza/c4cXh/:VdyO4YCPTBG0Ush/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf60ba5878af6bfcaa8788cb2da32d57_JaffaCakes118

Files

cf60ba5878af6bfcaa8788cb2da32d57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winzip_
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ