424f75e8d04029801cb24c53939bfc86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

424f75e8d04029801cb24c53939bfc86_JaffaCakes118
Size

248KB
MD5

424f75e8d04029801cb24c53939bfc86
SHA1

66d740c7d043457d25280af670600365308b8c01
SHA256

154d743540e9df7dc349f9406e40708629218139389e9131d13cd3ffa3ce305f
SHA512

4bb3d33f60c28454abe2aa6b09645ab2ee7a70611081bd9ca243cfd798be3cb9604f922a6876c4c08d5f0632235ea38725104a97bd58e228ef036b06978233e6
SSDEEP

6144:f4idkP4YWZS3r7kbqRnCMVfjnufpbyPgbun6sa3D0DDq:QintwIb4nNrnufpbyPXn6dCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
424f75e8d04029801cb24c53939bfc86_JaffaCakes118

Files

424f75e8d04029801cb24c53939bfc86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 516B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE