d36527f0c5ff1bf5255b49a1d00f5795_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d36527f0c5ff1bf5255b49a1d00f5795_JaffaCakes118
Size

35KB
MD5

d36527f0c5ff1bf5255b49a1d00f5795
SHA1

6fbc730521415ab9d2bf155a6993e65ee85d4211
SHA256

4390cef2ff57c0e7550bbe5555407281c78d54ae34acc2949677d1951bd07ce1
SHA512

6ca9838d49682874971268b6bb2d2d70f57aa0739e0854e0618ccd0b207f347fa22ea2bba22449a54dc0b21509b49892a7927d3f333ae7018b5c03da92f760c2
SSDEEP

768:pepTwWlxHJzj3rRbBR09ZfSNJHBbYf+JyGPiDONByJgG:peWWlxpltR09KHBO+AGPgse

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d36527f0c5ff1bf5255b49a1d00f5795_JaffaCakes118

Files

d36527f0c5ff1bf5255b49a1d00f5795_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

tmS%qc]h
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

8P$-Kdy4
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

*udOLc6\
Size: - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

E(EbSp0"
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Olt]R4nL
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE