d64e9ed696a59c5564d232d1ee94e98c_JaffaCakes118 | Triage

Sharing

General

Target

d64e9ed696a59c5564d232d1ee94e98c_JaffaCakes118
Size

88KB
MD5

d64e9ed696a59c5564d232d1ee94e98c
SHA1

7a77666523d4663f2f661e76d1997950723b26e5
SHA256

c06b9f5d9d44feabde3eb1ba33501d75e43e20e3f7422a65a4155046bc0d65b9
SHA512

73cac98ecae0ac667aec6b104329ee26cf66cf96340a3a69f4ee6778ca04a165bc78130c057e8dcf6b2092d418f2d2e4ff6ab8fa079224356aa6c6fe73d6596b
SSDEEP

1536:Ccv1H0CNp4TTEmaTIFsM+50t2rsa8P5fbXr8XO:7iPFanN50t2rTCXr8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64e9ed696a59c5564d232d1ee94e98c_JaffaCakes118

Files

d64e9ed696a59c5564d232d1ee94e98c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xpp
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ