f54a76fb5bcbaeecc4fdda770db3fdac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f54a76fb5bcbaeecc4fdda770db3fdac_JaffaCakes118
Size

195KB
MD5

f54a76fb5bcbaeecc4fdda770db3fdac
SHA1

32249c2fda2a8d6577ab149f63a3d510c83fbdb1
SHA256

23da67acb2611d607f3e189c241ce66ba768021ee8d2805f005919bc1f6ef163
SHA512

c18f211dcc2b1b192a4dd6d91113e61a89dff1ab7ef6ca2baa734ba394d49c887132f2e6211ecffec2b8aa7cb22641336dd9397cac11f01111ac5538315577d6
SSDEEP

6144:2WEM/b1DOxiVHpzpyvw7kRriSMSPLUKIRhC3p:27M16EHyvwyriSrLxwhCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f54a76fb5bcbaeecc4fdda770db3fdac_JaffaCakes118

Files

f54a76fb5bcbaeecc4fdda770db3fdac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.weit$l
Size: 1KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t623ai
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$4895f
Size: - Virtual size: 11.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q1rk2j
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q50$p6
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 448KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 192KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE