JaffaCakes118_504d7067071384b3ae5986e06ed6e5af | Triage

Sharing

General

Target

JaffaCakes118_504d7067071384b3ae5986e06ed6e5af
Size

265KB
MD5

504d7067071384b3ae5986e06ed6e5af
SHA1

480f7f19f21b65153f2d0ccd24395a23ad1178b9
SHA256

f51c60aaf0496ff120adcc841d67202659124abf0f06f5a3c9bc9efda4db6243
SHA512

7146016e7e745917c8f262285e2d5448c52c2e8399bf84e603c581d6d729a1d56a59c859e1b274eb633b44f530fa7bc00c48a04bb9a68bb53f95ad7a5c181c7f
SSDEEP

6144:xHAge/rGpjZL02vIM4IHaQlJLsHaKMsHleE8wUVLEdqdBTLh:xHAge/SZOA9DrDQHZHCwauqd1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_504d7067071384b3ae5986e06ed6e5af

Files

JaffaCakes118_504d7067071384b3ae5986e06ed6e5af
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

JxQVQTim
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

K6p7aoZD
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

glrxoa7V
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B1CAtQA3
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bcI49lZI
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
B1CAtQA3
CERTIFICATE
K6p7aoZD
bcI49lZI
glrxoa7V