cf7a271b10bc7594e1b0a9302db61b68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf7a271b10bc7594e1b0a9302db61b68_JaffaCakes118
Size

502KB
MD5

cf7a271b10bc7594e1b0a9302db61b68
SHA1

9cd3e9aa27630a93a6dfcc2c63f81249077ca4bc
SHA256

64901c8a8b88b65f2fa90afaa688608745c7ce844b85fe6f4b8ee9805576cee8
SHA512

33af7417e72e9bd37389fbf875fb1a022f9d870ef65122bf6d5e164e37fa49aa4b46e662e83461423cb677ef14e9bd0110465830bb0a5f7779b54a5299db902f
SSDEEP

3072:8iPlCdsEawlXoAZwCJyKpOYhJcQi9X7BNrNDaJ31UTTzJMacFwXoTmzhx:HNCdsbwbsIcQIrBNrNDI3TadJzv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf7a271b10bc7594e1b0a9302db61b68_JaffaCakes118

Files

cf7a271b10bc7594e1b0a9302db61b68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ