050e0138799651b6afaaf64ea02805c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

050e0138799651b6afaaf64ea02805c4_JaffaCakes118
Size

563KB
MD5

050e0138799651b6afaaf64ea02805c4
SHA1

e4a495c37b86c3a676d47f7b0f6d140745847beb
SHA256

c6f25e621718de6d177e365ae1c60d3f69745abd987cc557277a2e141d10f30a
SHA512

ba35137a676c522b4e8519f72b3f0e37d552999eabc52818291ae650f086863a902d7ea2b71b6bd3a3237efefcf47581a9459c585afaf40934447a7170359ba4
SSDEEP

12288:7Wa2KyitbVOLQS4UpSk59PWwNtx6MEQI6BLqItf+F7p:71yioQFTuxW9c2IR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
050e0138799651b6afaaf64ea02805c4_JaffaCakes118

Files

050e0138799651b6afaaf64ea02805c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 49KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

upx
Size: 509KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE