f671a1db5d9bb55835f7564eb39d7e16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f671a1db5d9bb55835f7564eb39d7e16_JaffaCakes118
Size

523KB
MD5

f671a1db5d9bb55835f7564eb39d7e16
SHA1

98a65918a339c397de980034cea844c7ede3f21a
SHA256

3237631357823fb2b63cdfc851a7310fa0f351fcf7eece37dae71ff53a522914
SHA512

3df93165f090599bbe52d00f60c6cbceb92e992a498ee50418c8a61660717dd867481075ff9f626ec352aac283e00e6fbdcb83fc67f6987b4603c2bd0ecfe31c
SSDEEP

12288:J0jwWFFEQLm55OgKsQ5QtUF/kZAmWt8uP24:KjwKFE/59KsQ5QmXtI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f671a1db5d9bb55835f7564eb39d7e16_JaffaCakes118

Files

f671a1db5d9bb55835f7564eb39d7e16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 725B - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ibu12e
Size: - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.328leu
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 488KB - Virtual size: 492KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 15B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE