d23adbc40f34dc45550ef1a1834ed2ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d23adbc40f34dc45550ef1a1834ed2ce_JaffaCakes118
Size

265KB
MD5

d23adbc40f34dc45550ef1a1834ed2ce
SHA1

a3f3f749443a07f7c9f6b7e8265b249f426eafc6
SHA256

a1778f2de3f24315773dea06022849244dbe8b8c41b7f0c1473d826d97007838
SHA512

534e27fa70da5a1c3b78bc03253be506a496b63b9bcab32711006887458aa74a8a8b8c2f3ba657b9b0b7aa85f77d56879e4675c739fccb174a48c5070d0e973d
SSDEEP

6144:5DoGF7+0Iq3j4LnCZ5c5cZaaFc+63MtD7MUdoktO:5qkj6jddgO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d23adbc40f34dc45550ef1a1834ed2ce_JaffaCakes118

Files

d23adbc40f34dc45550ef1a1834ed2ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.itext
Size: 1KB - Virtual size: 188KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 313B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: 260KB - Virtual size: 264KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE