cfd699a250065bc56a72c82c80c37479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfd699a250065bc56a72c82c80c37479_JaffaCakes118
Size

61KB
MD5

cfd699a250065bc56a72c82c80c37479
SHA1

cfceabcca518306f3aff5d61a743c21e7c449633
SHA256

a4ec15619131998e2500c600a8c216b165c462ce938d503c389a5658824e90ee
SHA512

d8081366555597a7184312c0d99b90ca1ad529025aeb075b7ffebf16e83cb936a160b89e10df8437fabb45a7ef0c48b60a4e5fb2cd7473b0c9fe54c15ec1da45
SSDEEP

768:NiOH1155UGuoi6l0ziLZuPc1REMqLDbVm3:NJH115aT56izyZbeDDbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfd699a250065bc56a72c82c80c37479_JaffaCakes118

Files

cfd699a250065bc56a72c82c80c37479_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 97B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ