cfdba5f2a8acefa42c5339ce56bc6816_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfdba5f2a8acefa42c5339ce56bc6816_JaffaCakes118
Size

84KB
MD5

cfdba5f2a8acefa42c5339ce56bc6816
SHA1

ed47035e7de3f4b845bce49b0c14de856136b2f8
SHA256

1dd941559ed62533d599cc427dfb28f2f90b3e92db5c29a7fe14a66b34c58e85
SHA512

9817a41bf1309fa2f893adfb2984694c38792eb6371d6594b6f47cc3c6ce10f7767eaed2b7a6d53fd9cf10d73f5c1e0e7037add028ffc22268d48e6c3783de4e
SSDEEP

1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EU1Bq:5m8nBjTmbxRBRN6WYiKqVo6Ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfdba5f2a8acefa42c5339ce56bc6816_JaffaCakes118

Files

cfdba5f2a8acefa42c5339ce56bc6816_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ