cfe64e1618568b6d4f79e9372e5d36cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfe64e1618568b6d4f79e9372e5d36cd_JaffaCakes118
Size

392KB
MD5

cfe64e1618568b6d4f79e9372e5d36cd
SHA1

573ed6b5a125a86e819b5678b7bdbf7f33fe9288
SHA256

089b59051067ac1a2107a3b024f330003648a8618aa5dcd0a1a8a4f3018517fc
SHA512

1b1fe2b3dbaca05a774f05b139ccdec19a1ed144073054cb65f91d51c9651060abc33d41d09c2b4cad4d70706c48cab8cbbb17ee5edb51f6f77c23b531bf7451
SSDEEP

12288:IN1i/dxR5zFO7HSwqB++Sl8OmaV934Sv9A:CkFxLFO7HhqhSWW934SW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe64e1618568b6d4f79e9372e5d36cd_JaffaCakes118

Files

cfe64e1618568b6d4f79e9372e5d36cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ