d5b03e6699e54c2fc1664ef154294a75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5b03e6699e54c2fc1664ef154294a75_JaffaCakes118
Size

24KB
MD5

d5b03e6699e54c2fc1664ef154294a75
SHA1

d5e22d4e21b88a7fc395db933a525294649b2186
SHA256

b40f9b7519b29338ae75d22fcdf4b071f58e075cd9c829e117dbe45fb2fc00f9
SHA512

9186391c7cac192d652fc2ec4fe90370ca815c9efc6178565efa790c557c8fed3f542c0b387df2a85e64955001d7a20dd8a5b5f40959e3485cc7155339a535e7
SSDEEP

12:1TDl9jyjg6j5rAmpLqd2Vdt5Bvf59SID:hDlBwvpBVdbBvf50

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b03e6699e54c2fc1664ef154294a75_JaffaCakes118

Files

d5b03e6699e54c2fc1664ef154294a75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.RIF1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RIF2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RIF
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE