e085fb1841f91237edee643f04fc56cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e085fb1841f91237edee643f04fc56cc_JaffaCakes118
Size

103KB
MD5

e085fb1841f91237edee643f04fc56cc
SHA1

f7c4184583cd1b9d76518216de6e8aa00c3f0e3a
SHA256

b21c031580b5126a5a7908dc7dbcf2299a0126ea7d35d8ae9587e36e2039c875
SHA512

ea88b78087f0158e179697a6440aee15753617fef22d0581a9e8b455c456395e7b49ad2ca80347a59d57550bb372fad305a687a2b36c5319b6e63aaa22f2016c
SSDEEP

1536:5VIH1Nui+ZbvFFm0nzoIWisNeLlWNrTo6fUr95M6089NvFmy7ZkzxVbG3A2DLhH:JjZ7m0zodeLQTH4DYbG3Aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e085fb1841f91237edee643f04fc56cc_JaffaCakes118

Files

e085fb1841f91237edee643f04fc56cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 67KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.perplex
Size: 1KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ