cfd2afe60d8ba32833152028ecfa1cd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfd2afe60d8ba32833152028ecfa1cd6_JaffaCakes118
Size

192KB
MD5

cfd2afe60d8ba32833152028ecfa1cd6
SHA1

c3cb9029cc07d23bda6b9eb190eed35689032c9d
SHA256

99a0182931ac5a1c3809f7c613028f75ddfd7764aa254d3d1d8b9ac9afcb1c37
SHA512

98660fbf064c9d7695702571aefadbbe97601901c53ccceb7329c82f9deaf5a532c806a867cbb06d8ec57f0391b50ba96057e504583f60555cbd9fb0a1c2eecd
SSDEEP

3072:Nucz4W7YZUsQeQ1vAEVVj5QGqrKQAiqifgbOAbOy5u1A1r/5P/hRstJRB8d1cy8O:oW7K7Qe+vR5C2QOEgzuorBx8188

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfd2afe60d8ba32833152028ecfa1cd6_JaffaCakes118

Files

cfd2afe60d8ba32833152028ecfa1cd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 462B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ