e23f6faafd0a48cbb70a605dc67b9933_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e23f6faafd0a48cbb70a605dc67b9933_JaffaCakes118
Size

35KB
MD5

e23f6faafd0a48cbb70a605dc67b9933
SHA1

c6e22d330fc6d9b15efd834ef0adcace92b0acc8
SHA256

3f5ca65610ace34e444829670b0c2cdd6c8385b0b74dc2808ebe9c10d79eca6c
SHA512

f27759b8a008d8374d8c130d2ca2569c89eb0a92e817402c6f2da43a3b09b291645127b95e3e738f2b4cde58eb88ab7f6e51d758a0350fe57e8183672cfed821
SSDEEP

768:i3BPkHzzJSr+/jiuPR/f+++s24Rc3e5DH48rbT20:i3BI4+bxPVfk4Rc6DHDfT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e23f6faafd0a48cbb70a605dc67b9933_JaffaCakes118

Files

e23f6faafd0a48cbb70a605dc67b9933_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ