0788d7a49e29eaa96f1faaa1bea43e53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0788d7a49e29eaa96f1faaa1bea43e53_JaffaCakes118
Size

444KB
MD5

0788d7a49e29eaa96f1faaa1bea43e53
SHA1

59b708fc4d0a86ce198ce62eb8fa49567b28f0d1
SHA256

e907694ed9dd79b0c352bb834d0465ca80404c6dce51786541447173f933dc94
SHA512

614dbb3af0df097869bc2decce9df27c573fbac9e18cd4b77260475d04fdd617c82ed92b7740a4120455bb40f076433f80ca0696f2d21d12ce0d8870affec9bd
SSDEEP

12288:D28fq/VJZ9SPa6nC8GJxFrdZeXoTzm+ro:DffAVAPFC88xxuG+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0788d7a49e29eaa96f1faaa1bea43e53_JaffaCakes118

Files

0788d7a49e29eaa96f1faaa1bea43e53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

VuvyLeTi
QuBafuvipy
FigipiHo
Syhubewomesury
Fecucyhi
PuRiqujyrocy
HavedaliTiko

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ