d1a178287283957a6981b49babd5ea72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1a178287283957a6981b49babd5ea72_JaffaCakes118
Size

445KB
MD5

d1a178287283957a6981b49babd5ea72
SHA1

d0eaf98d4466cb93eef5fa8a68159ff9ea7e822e
SHA256

b1f848cbbe6d36e5b630734ad4463d880e50e94d0213eecd09c249a77bd5cb95
SHA512

945f1bb84ffede9110d16479c66817800b8d1b4390fddbfb391534dc0f6637c34a7ee102d073dccc472bb2ac4799df110131170ade4fe8342c9eb644ed0dea07
SSDEEP

12288:1tII/mbQMSXwTP0298m7KO+a60qRp/ViFmEes8ytgrL:1iIebQJATPBMa6JRpdGjPtkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1a178287283957a6981b49babd5ea72_JaffaCakes118

Files

d1a178287283957a6981b49babd5ea72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 130KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.:...-..
Size: 312KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE