130836c3d45614739f88e876a05072cc_JaffaCakes118 | Triage

Sharing

General

Target

130836c3d45614739f88e876a05072cc_JaffaCakes118
Size

241KB
MD5

130836c3d45614739f88e876a05072cc
SHA1

aec8335839c61758b9a58db9bfc56a040b1b6c3a
SHA256

cd4fb174e5d4b0f9899e4449010ff2b16cf94a4f03ac00edb7401d262fd94af4
SHA512

2797d8f63e37a7f9f8f519a55605da46f2e6416f8c71913b2c91cac023d107d8ac6fdbb394a342b6e1ddd904aace3f901eeb25442b64951e4a9ac597f2d8af23
SSDEEP

6144:ZuTHkLyp9jUxLMHjHoQkKt7T+Z8e2641LAV:ZuEy7jymjcykp41EV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130836c3d45614739f88e876a05072cc_JaffaCakes118

Files

130836c3d45614739f88e876a05072cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE