1282b0de72875fa8d6296d121e3172fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1282b0de72875fa8d6296d121e3172fe_JaffaCakes118
Size

1.0MB
MD5

1282b0de72875fa8d6296d121e3172fe
SHA1

0cf6acddf072b77f9a4129db287cc2efe7aabb56
SHA256

bd59da5e55a193e3291b87c596a43c61f977b4a309c88b25648c45d74511fbdd
SHA512

4cfd85145df0078c436bfe724687cc7f0ca34a28262a43c4bd7c02d9730bee621bfbe398287432e0bda795a18646334d303dd66aa1df55661cb426c8ba154711
SSDEEP

24576:DXQKznLsKA4bTlV9vwSfeqsxC3oh4Rj5xrYIKsIpG:3FTl7vyYUQ9KM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1282b0de72875fa8d6296d121e3172fe_JaffaCakes118

Files

1282b0de72875fa8d6296d121e3172fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

SHD0
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SHD1
Size: 1004KB - Virtual size: 1004KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XSHD1
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE