cf79e64fcf0638519bab3c1ad3e0e617_JaffaCakes118 | Triage

Sharing

General

Target

cf79e64fcf0638519bab3c1ad3e0e617_JaffaCakes118
Size

181KB
MD5

cf79e64fcf0638519bab3c1ad3e0e617
SHA1

8d06c7618dd98209f2540110ebb339216c46e9c4
SHA256

c147bfe0614f42d2a046af623e5d532522022b5fd7d1affb85e97b31e9a7bae8
SHA512

72afa5c69e14123ae9170637cccc1e9f260c0898962976b354b8e8a0fb1088b8795be2a3e9651b3125e334f597eb46fb0cafc111837ef6d254aefe57dbb708f7
SSDEEP

3072:mcQ3yaHmroQ2jDf0kLtbQ+FZ07+/IaDE9ZPzGPUhJ6qDjEkvyK5N0ZrmleR48/or:bIZHaEbdlQ8Z0oIamZKPUm6jE0yKbkmW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf79e64fcf0638519bab3c1ad3e0e617_JaffaCakes118

Files

cf79e64fcf0638519bab3c1ad3e0e617_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 301B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ