dfab9ce40752f022325e578ed707e1f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfab9ce40752f022325e578ed707e1f7_JaffaCakes118
Size

41KB
MD5

dfab9ce40752f022325e578ed707e1f7
SHA1

d3439e603f676690f3b676e23e91cbc5ead50b89
SHA256

0fdd9728aa93b03fb9ff97a6158ff6aad96c2483c4e64a77e1e5fb5324bba1ac
SHA512

4cd3efb9a56789def2ea8f4da5f2539983e1a26f3f5f6fb693d937d09fe3005c38e546baee76b934ef9a3c56ebd31b1d51f59e4e5bd22f98b1723af19be6e1b2
SSDEEP

768:LIX9J13979VE8PoETBvywD6wjCdxbiqz8JD:sX9L908gE16wD6wmCqz+

Score

1^/10

Malware Config

Signatures

Files

dfab9ce40752f022325e578ed707e1f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

01:f5:8a:f3:46:63:57:f4:dd:3f:9b:8c:fc:84:0d:1b:b8:0b:e7:bd
Signer

Actual PE Digest

01:f5:8a:f3:46:63:57:f4:dd:3f:9b:8c:fc:84:0d:1b:b8:0b:e7:bd

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

Q
Size: 40B - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 40B - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE