406a663079f695461b63034e9dc066c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

406a663079f695461b63034e9dc066c8_JaffaCakes118
Size

200KB
MD5

406a663079f695461b63034e9dc066c8
SHA1

57c0cb379e3b0a08fdd944b3c5e8069aa5ce74f3
SHA256

47238cf8b19b2b5498638b4fe46647a1e6b7f0dc9ae25e96f28e19cbdada2ca4
SHA512

2675e393fa2db4b5bd23d109f552b1006384fa8e81719c2dae954d92cb3b39f341cc293030c8d1dbb0ef20b122ad09b4106d177667f85d138054fae570e40cfa
SSDEEP

6144:0fJVX7N8Kua94JS54jUmPKs0cAGQgp1Ln:0Bnua94JS1YKs0cAq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
406a663079f695461b63034e9dc066c8_JaffaCakes118

Files

406a663079f695461b63034e9dc066c8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.psikif
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tide
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ