cfb96efe0c39c5e7e4bfd6ee1684b796_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfb96efe0c39c5e7e4bfd6ee1684b796_JaffaCakes118
Size

405KB
MD5

cfb96efe0c39c5e7e4bfd6ee1684b796
SHA1

1d9a621232317c154dc9f2fc388b9c82dff07fa5
SHA256

6707f3acf92fa2cde90c8c4020baa94f84295da097019cf2c873d1d72be4b779
SHA512

9c00b8484224b7ab6e8828c9be3b7f2786026a2347efc4ac4d60efb800dadf211b1b8ca2944189c6e5b85549e088532faa7e11b2c5b71983accb3c3154cb5220
SSDEEP

6144:bOS0fDg9Sjny4OFnMp7XtFtoavCB0u88Rfmpo9eZg+nqiDz/JKvl0Dgq97NmIly:r0fD4SjnUFMtY/Vgg+t1KtOpcey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb96efe0c39c5e7e4bfd6ee1684b796_JaffaCakes118

Files

cfb96efe0c39c5e7e4bfd6ee1684b796_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ