90c5fb280c4da17556f6aeaad7fc739f_JaffaCakes118 | Triage

Sharing

General

Target

90c5fb280c4da17556f6aeaad7fc739f_JaffaCakes118
Size

904KB
MD5

90c5fb280c4da17556f6aeaad7fc739f
SHA1

7576274fd70d94cf77bfc53c85a18c29cce4367d
SHA256

3af5a3ca414e2f988c1b3d5b8cdf17755311172cb4cd5da48024a590458d05f8
SHA512

df5080e4ff0e74e79e51638da200da8c1699a5929619f64994aa38b267b0cd8dd31d31a09c0847e1186421cd486fec0ff2a2d3c20f32193dd36485d1cc08d053
SSDEEP

12288:yh5BwsRozSef8BqMhXe9o5SJ0gtlL+7IAMF8zCWvyjwJslzijbCCl+c2m/zsdFu:U52sRPek0YePRS7EFzzjwSjk7EFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
90c5fb280c4da17556f6aeaad7fc739f_JaffaCakes118

Files

90c5fb280c4da17556f6aeaad7fc739f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.CODE
Size: 5KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 598.0MB

.kqbgwt
Size: 892KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ