cf87dca3d33aefbae5e3ac397779c161_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf87dca3d33aefbae5e3ac397779c161_JaffaCakes118
Size

420KB
MD5

cf87dca3d33aefbae5e3ac397779c161
SHA1

42dd2a6a8dc87c1b9896216392f2a6187074128f
SHA256

65437f5c241579377aafd9350470f0b6b075f2efd83bc17c9bd726195574c3de
SHA512

14864ee7646a05ae1afbb020fee155f37178a447d4256a26b3a11901b7692495286a4b837c403e820d00dc3aed637559e7ec3c1351dd4a876d81a8b985de1a2c
SSDEEP

12288:SeLtji7HhLw1IATIbQl/OiXu6shaJM6nH7:DhizhLw+ATRSXl6b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf87dca3d33aefbae5e3ac397779c161_JaffaCakes118

Files

cf87dca3d33aefbae5e3ac397779c161_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 374KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.petite
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE