02e79ef64e31046ad4585e28c92264a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e79ef64e31046ad4585e28c92264a1_JaffaCakes118
Size

25KB
MD5

02e79ef64e31046ad4585e28c92264a1
SHA1

ce55d3dc9495c910669117c672c1eef95b4cdb78
SHA256

b59638b2862d34b3a0b92f629b66fba7bc1bff35596585e0c6e8d53cb20c5d61
SHA512

d6286fb96754075b0fc1f60fc4ec24bb1ff6e664d7a92c50ba0c7852936c517c505307dc5de989e84f6e6996ed9d87357e70e5953edeb1b29bb07751c5f5b07b
SSDEEP

384:3ogQf2NQwLnCZrJsLzDvddh+xfHNWldG7tqgM35P67OQ25s9r5h65NpP:3BQeaeCybdL+RHNW7KtqgMJiF25sV5hk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e79ef64e31046ad4585e28c92264a1_JaffaCakes118

Files

02e79ef64e31046ad4585e28c92264a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ