099e3d6f29428de399c4a415d539d228_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

099e3d6f29428de399c4a415d539d228_JaffaCakes118
Size

1000KB
MD5

099e3d6f29428de399c4a415d539d228
SHA1

d76cb8dce9c436e9bb9d585f9752aa59e40bade4
SHA256

98a6245ea1c8610325b7ac998c68dc82e927facbfcaa37a5bb129ad18736c848
SHA512

e21172f171246f79053531c0b76b4d5f7e78896b44ec2be9f6b3907705c68ade00e4db521648a025e632c88b5a395c816a5a96af6dcf3ccc5c82166739dc66de
SSDEEP

24576:YkBhw7QN9mtUSnB2D95B1B+5vMiqt0gj2ed:9ByU6tNB09qOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
099e3d6f29428de399c4a415d539d228_JaffaCakes118

Files

099e3d6f29428de399c4a415d539d228_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ