13badcf018c2c1f3c49f1597368ad4f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13badcf018c2c1f3c49f1597368ad4f4_JaffaCakes118
Size

193KB
MD5

13badcf018c2c1f3c49f1597368ad4f4
SHA1

650cdf0f67d633b6afe618ac0d9f7a45aaa55ef7
SHA256

0298bef4784f1e16ec1dde7f7ee2836aa4ea67b4327d61c0dbe59ba17cb012de
SHA512

d38a488f5de376d71a9fb32a931b0d8c0cf49d7e68927a9f14a98ded07c06975641bf707116d622a7ce6f927456e7ba872e1bb3361d43bb6bdd334b5319110cb
SSDEEP

6144:9kkOWb8b9mo5xx6uq4/94qUTn3Iw3Oc/2SchI8:rCWqi3jOzSCr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13badcf018c2c1f3c49f1597368ad4f4_JaffaCakes118

Files

13badcf018c2c1f3c49f1597368ad4f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ