0659e18c9bb0366b1650f3e451662029_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0659e18c9bb0366b1650f3e451662029_JaffaCakes118
Size

116KB
MD5

0659e18c9bb0366b1650f3e451662029
SHA1

6dd37f59f315d6accc623ce5b80f5f89c3e4f03c
SHA256

0989bb7b087ab7dee4e9dc8f5c9607e5fac7bc186eff173523c4658c1fb0cc43
SHA512

00c9f45d51aa55974e6d915c9b1dcac78d3f7a20891943714d732b84cf0d077430b4bfbabcb2c09535e4758b82b924a3d4ed54d7bad78ca52ea5a42bb0fdd8cd
SSDEEP

3072:oubLs7BhGkMEvrutheQw+zxtR7vAXBtHJhTQ:oubLs7W46heQw+zVahTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0659e18c9bb0366b1650f3e451662029_JaffaCakes118

Files

0659e18c9bb0366b1650f3e451662029_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.RC
Size: 512B - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RC
Size: 102KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adate
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE