0500f03203b1f4119cbc149e1441e819_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0500f03203b1f4119cbc149e1441e819_JaffaCakes118
Size

178KB
MD5

0500f03203b1f4119cbc149e1441e819
SHA1

e7df89187e62a7903d4e421afc868acd3216c8de
SHA256

2441fd0ba3f8ea87b68c5b3aa77cfa575c285829f22e8fb318068d917a10cd74
SHA512

814e0dbcf092706b4af664db372a0fe2675434ed81c89403dc17a9e3367e0d837513a92c91e600a0a68919115cf3e509c5629b846722ee906531198aa214e400
SSDEEP

3072:29TXaRiGQ44S6B1IIlEfNOBvX8i/BDnWEg7Y4Y3/d8tEoBS669FwrsoqD2gzJw9e:STXaR1cB1/61OVZ/BDnWV7Y/vdGEkz6x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0500f03203b1f4119cbc149e1441e819_JaffaCakes118

Files

0500f03203b1f4119cbc149e1441e819_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

hfeegy
Size: 989B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

derst
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ