d5031f1ef6658959e30e074798b210e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5031f1ef6658959e30e074798b210e8_JaffaCakes118
Size

392KB
MD5

d5031f1ef6658959e30e074798b210e8
SHA1

28d87a9e14dfdcb7ca2174e938a226446b3daac5
SHA256

ec2ea0aa0f280fda310f9fec08b30884b99538398f3f5e53d2b5f603ec6f6802
SHA512

7ef3ab100bf55f233b3e5f3b760eb3901dde633d539c7cd496646d17fdf2727349d9dde050727f0c87ace4ea13fdeca7fef81b513e2d2eb39ed6b2b7b389f18d
SSDEEP

12288:3rw7UEHYTNZo7v9/UD/dtHusw8wxj9eB+3Caft65ccD:3rw7UEHYTNZ8Qdp2xQyCaV0c+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5031f1ef6658959e30e074798b210e8_JaffaCakes118

Files

d5031f1ef6658959e30e074798b210e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 17KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

spm
Size: 369KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE