cf8275bb4491bce0cd890f4a873ac791_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf8275bb4491bce0cd890f4a873ac791_JaffaCakes118
Size

69KB
MD5

cf8275bb4491bce0cd890f4a873ac791
SHA1

22f7709241c48068042d173acfb05cbb773627a2
SHA256

c00a7927b21226f85847a3e75bccdd1d562fc1a5f480630b3c1a4ad59fe33ad2
SHA512

513cdf99deb610885b69e90dacebde5edb37812d35eab5898f28b061082547a4e6c66b0dafcc67b47e7e7d4d4371359ad337791afe012f6f27b2fa0b8df762f8
SSDEEP

1536:guHCkI9DINXpzo2IrRknW/CPIvICuxczMb70+0E:5pIDINXpuL/CPIQVxcok+0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf8275bb4491bce0cd890f4a873ac791_JaffaCakes118

Files

cf8275bb4491bce0cd890f4a873ac791_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ