f090342bb4448eaf27b9567e561854d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f090342bb4448eaf27b9567e561854d1_JaffaCakes118
Size

1.7MB
MD5

f090342bb4448eaf27b9567e561854d1
SHA1

0c5260d08e7e7ed6dffb746890b8c2b5845ff628
SHA256

c1c5d94533f6d14b581550ab584885a51276b84476fb87bbb7dcff59eacaddc8
SHA512

f42ca73899d7a6eb879fef9fbe53e234c3765d1ef4c51d40354833c07678f1e816834c1bc07a2b96c5c8a351cb06afedb1279c5ea79062d4a63caa28d67ac4eb
SSDEEP

24576:qsB38at0XAxbb5C/jtLh0iL8DZyWAButQHG9/OjzOqJP7wmpsc:qw3t0wxbbsjtLSZyHZljyqJsc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f090342bb4448eaf27b9567e561854d1_JaffaCakes118

Files

f090342bb4448eaf27b9567e561854d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 521KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Amba
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE