f68c7df9506e27496f4263fba8e98344_JaffaCakes118 | Triage

Sharing

General

Target

f68c7df9506e27496f4263fba8e98344_JaffaCakes118
Size

208KB
MD5

f68c7df9506e27496f4263fba8e98344
SHA1

4c36a9e20333ac17f52922e43b2394905b11a1a7
SHA256

f4dfea0046abd93116d879b4a85cf2b5afa3702fb10bc01a315373f87c3121c1
SHA512

51396c9a06d18c59c58e8f60948568f999b92e0ec38604fbff1a0100887328f0f6f099fb84dfdfc01ff751723cecf67fe4ffae4d519492b808e1a1d72b98289b
SSDEEP

6144:PNT0Ige+bpIQSE7M5ZsQYX+77hde3Ex1FZb:PNHge+b2xEIzK+Ph4ExRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f68c7df9506e27496f4263fba8e98344_JaffaCakes118

Files

f68c7df9506e27496f4263fba8e98344_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ