d253dcacafcc4b6797c38aa5896238e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d253dcacafcc4b6797c38aa5896238e1_JaffaCakes118
Size

286KB
MD5

d253dcacafcc4b6797c38aa5896238e1
SHA1

d0bf1184184418b59fc45def397762df328e9277
SHA256

69f43fec83d13beeef76dfc463698fd36897868b81c38b4d1af7f9614f22832f
SHA512

e93633faa8d8825996792cf1add37f2b9d7d62256b1699ea95d68beb0c43c0c18b3adecf9db87ad843513cb3bef322168abfb2c01692a302969b0ba2bbe402da
SSDEEP

6144:eI7vMLcngcs4g/lR5tdTfbGQ3VG01tX60V8rV2xOq3:eJcR0lR5jLbGoVVvV8rV2xB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d253dcacafcc4b6797c38aa5896238e1_JaffaCakes118

Files

d253dcacafcc4b6797c38aa5896238e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

I � 0
Size: - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I � 1
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I � 2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uLlujH50
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc
I  1
[0]
uLlujH50