e1143b9562770fc7035c4edaa82b4df8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1143b9562770fc7035c4edaa82b4df8_JaffaCakes118
Size

71KB
MD5

e1143b9562770fc7035c4edaa82b4df8
SHA1

ea76585c2d130ed5d0f1b587aa61104fbe4c4b7c
SHA256

17fd7f80f981d87058d611f615a3fd8598d76481ab42a34d764a7a935489e48e
SHA512

89a20ffbf58b0399fd2ed4e72bedf09c09149c99edbc887bee059475eed05b48833acf8d9082af904e92bb2920558241f9da69fc7570e91418158b3a50ea928e
SSDEEP

1536:VEeu7wf3BiTp7NTTkEVXDrzD5LYEG/fkyoN+BlOgAbRfK:uEiTpxpx5kEAWUBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1143b9562770fc7035c4edaa82b4df8_JaffaCakes118

Files

e1143b9562770fc7035c4edaa82b4df8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ