e136068a889a7ce5c9bc3ad43d19ba20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e136068a889a7ce5c9bc3ad43d19ba20_JaffaCakes118
Size

543KB
MD5

e136068a889a7ce5c9bc3ad43d19ba20
SHA1

a8b0bddf74469b60197a78e5da8c1b006648e1a5
SHA256

b84fcb043787c2d5c2fa0452a92fec0aa89a66860d2d8b07d1b88882866d8a83
SHA512

b28b65ce34fac954c860735194b34b71c91fd1c2a8803de538fb02b3911fab2b0f899bbc64772158e9585ff33635e9f3fb23a3b9a1cea7e6eef61fb5c5aaa88c
SSDEEP

12288:T0gzcT7+pTs84FrSwhfMH485d+FaPFS9LX9IXLSSSTDfxxgORqF:v+7ETJWuyfMY85dA0FS9LabbST4OMF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e136068a889a7ce5c9bc3ad43d19ba20_JaffaCakes118

Files

e136068a889a7ce5c9bc3ad43d19ba20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.HBK
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 407KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ