028489f1ceb5510a2b14d42a8978bde0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028489f1ceb5510a2b14d42a8978bde0_JaffaCakes118
Size

329KB
MD5

028489f1ceb5510a2b14d42a8978bde0
SHA1

975b07ea8233f91fe6838ba22a37585a292e9a39
SHA256

987bbc9d257b27e10bb1ce37e6bd638fe39afb88bca3a23d8bcd4fe2d3aaf5bc
SHA512

0141ba54639a211fd0c3b560bed66257be04efeace397a6359d5ff60066e11afdf2ae5435201b921bbd1e8246c0f1bca565cdcf5c6522a09235064d7efcec053
SSDEEP

6144:z1LTgMQsE/QK5D0fEHWNBiLpaGJiguEW9k1rqAtxKJD+V6KV6SHqEOa:GMQrb0fEIkMGLWOrn82/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028489f1ceb5510a2b14d42a8978bde0_JaffaCakes118

Files

028489f1ceb5510a2b14d42a8978bde0_JaffaCakes118
.exe windows:10 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ