e246c850983cc25d5a82209a741694f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e246c850983cc25d5a82209a741694f6_JaffaCakes118
Size

9KB
MD5

e246c850983cc25d5a82209a741694f6
SHA1

dfb1dd1a9e71fd0d234b146e16fff7df81fb2f14
SHA256

93b834558c5a7ad1b968227f8b66ee24b87cc9b3d3d3629a435c6c6bb96da318
SHA512

79d3edba6fd23a54e042431f2ceee6ee4feed476622533fbdb4f5927cd624eab5f7622b387bbecd91bf5629f15e37020772c071a67f66039a20b4e1b3c81e772
SSDEEP

192:2H0xYq6g18raVS9Y3fAa3vySXWn1B0oRXYbdY3Zj:2lTg18rLKvySG1B0oRXl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e246c850983cc25d5a82209a741694f6_JaffaCakes118

Files

e246c850983cc25d5a82209a741694f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

DGROUP
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ