13e7ed50d8587bcdfd77075bfce99f8c_JaffaCakes118 | Triage

Sharing

General

Target

13e7ed50d8587bcdfd77075bfce99f8c_JaffaCakes118
Size

352KB
MD5

13e7ed50d8587bcdfd77075bfce99f8c
SHA1

c75f2a7ff4ab3a9f17cd01c70e6bf4828c38fd9b
SHA256

e9e6fef408c1f4e61b598b4bf5201c2b15e98c91df981a23bf143ae996fcb572
SHA512

6bb4621273f78c39a6002f4b419d458da0e8e0c9b48f278266be7967addd9529f9bb864f3932b2fefa9ea3565cbecb1549e8b10904842c448c09bf46c454f2db
SSDEEP

6144:iRhZCnOJGE61j+jgedIzHvZJKCC4jowGxbQe+q1DTR8SI5:ikxa8edOPzKhtwEEqvI5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13e7ed50d8587bcdfd77075bfce99f8c_JaffaCakes118

Files

13e7ed50d8587bcdfd77075bfce99f8c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wzisdn
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE