f58d001f86be90eafbaec067f3b78456_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58d001f86be90eafbaec067f3b78456_JaffaCakes118
Size

96KB
MD5

f58d001f86be90eafbaec067f3b78456
SHA1

655d08e9736d4f56ce6a85db7fb56c7e8f3dbc12
SHA256

a1ef9a82cc7f68d3ea43017b06934e0d661aba74cda4216400f1e2d9d32e88af
SHA512

2bae7cfc8cc4ad2ee01d11e3a7cf65767760b7237e7bc9be7359ee5ef15aaa59a2f617ac293a23fcbc9bae4c361203a5e4f0af3979caf719b53c499d80173a82
SSDEEP

1536:ybs6yFKE9fQcG4WvmJy00YnZ83lI1CHcTYgZSxz4vz3IDg/VHl:yY6yFKE9ft5tMWZ83lgCHThp4vEMVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f58d001f86be90eafbaec067f3b78456_JaffaCakes118

Files

f58d001f86be90eafbaec067f3b78456_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Nofuxuresa
Motirygy
ZofimujoCoke
Gyninexohetivo
BiPediwuBaqyri

Sections

CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ