15dded152485f84e8708a6fb846f14e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15dded152485f84e8708a6fb846f14e0_JaffaCakes118
Size

583KB
MD5

15dded152485f84e8708a6fb846f14e0
SHA1

c885fcd37628b4557e88541fdfeee7b5053a489c
SHA256

13414eb21a21ad7c3fb9b4acd6075ed72730d566bf6180e6058f5d880668a931
SHA512

57d298d028ec7c9c5d08a8eab76cf10efa23dd7402590e6f6342832a22edc3aa270608e87172acc7a518d2aa6fcd0dad6781c191400ca51afa34d4bef93c271e
SSDEEP

12288:L5ktSJi2vNB/UPQtVQx1XEii1nfJVwI/ScVf:eSHNSMKyRJVPSc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15dded152485f84e8708a6fb846f14e0_JaffaCakes118

Files

15dded152485f84e8708a6fb846f14e0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Pav
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE