d13fcf86e5aafa0eddfd127ca60fad43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d13fcf86e5aafa0eddfd127ca60fad43_JaffaCakes118
Size

134KB
MD5

d13fcf86e5aafa0eddfd127ca60fad43
SHA1

633e69a0b2d90bad0755e4cd94863bde923d4c10
SHA256

44b71587881482764db058ec41a5b37621b24f0cd4c9d947d9abcc179c61c9d1
SHA512

0faffb17a7f3c663221234c948c4847d8bbffad270478a625082110966a8ec88d1654eb6f031b5d3ec25cfb13bb6a1a4e82d25d94e0b8d0da8e97e4f0a63aa85
SSDEEP

3072:5/sKLD5pQTpWar2KrSq/KQRk/sKLD5pQTpWa:5/sKzQ8Q3dCQRk/sKzQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d13fcf86e5aafa0eddfd127ca60fad43_JaffaCakes118

Files

d13fcf86e5aafa0eddfd127ca60fad43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE