fd60d291664dec3481c0cc1a396f77f7_JaffaCakes118 | Triage

Sharing

General

Target

fd60d291664dec3481c0cc1a396f77f7_JaffaCakes118
Size

39KB
MD5

fd60d291664dec3481c0cc1a396f77f7
SHA1

c9c46cbb28f890d9da3337bd0f3825e3500d8a24
SHA256

2da42af4ca8a2487bca0be4484088243e70eebb9d1745379f7600807059f2e6c
SHA512

4abe7d92125fddf9b9c0383ff88e89680da55eb897d8621aff9973c568ca4c4dcffc520da53a8c7f9878a49d5728fa3bf8e465048bbeb4e2b922764365a7fb74
SSDEEP

768:hqlssfOW00ae9T5MxJ+X5IdHbrlyaG333s:h5e9TOXZKaG333s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd60d291664dec3481c0cc1a396f77f7_JaffaCakes118

Files

fd60d291664dec3481c0cc1a396f77f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:~N
Size: 1B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE