d127ef3881c60c5495a9d79ab3530da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d127ef3881c60c5495a9d79ab3530da4_JaffaCakes118
Size

368KB
MD5

d127ef3881c60c5495a9d79ab3530da4
SHA1

ecb791f7c2bee8e9cc93a0995638e0fe98b004eb
SHA256

4929ee69141f300fd2522eedaf4a0c1b10f84b9653912eb77fdb4121c47c5419
SHA512

0f5df41067eea0a5c7707be178afa68e1e24b1724067f79c3fc3f8303b1ab9a75ace133d3c6a3de2e6dd606c102571ca879052a25114fdcab2019ae6a12b5272
SSDEEP

6144:J9SOZMzvQrpHapkLKPjIGRPbiKL6Lly3GLsWICObxxX4OV:NMzvMpH2kLK7TRTHW5y3GYLxxX1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d127ef3881c60c5495a9d79ab3530da4_JaffaCakes118

Files

d127ef3881c60c5495a9d79ab3530da4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 20KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3323232
Size: 336KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE