12f6e332be7e8e5f5b3d964326e61601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12f6e332be7e8e5f5b3d964326e61601_JaffaCakes118
Size

1.4MB
MD5

12f6e332be7e8e5f5b3d964326e61601
SHA1

abeb6b3a27107ff953c0c258696d9415741812e5
SHA256

8050ee6db0ef0ab70c83e60f41659e46b655cf4570e1a0d8f7a61f242e53dea6
SHA512

ff1da39b344c2d6046c946415f319268582e648d4aee39c323673bb11791640fd5346f8e5bd4eb8be811788b50fb7b405b15d4113308088003b0a7352504fc3f
SSDEEP

24576:8uPmLDUMihIXCE5gpJE4VDd+9wo0m7pwpwPjrH+wKegmk:8u+LIIX7qJE4VBiwo0mtwp2jrewKe+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f6e332be7e8e5f5b3d964326e61601_JaffaCakes118

Files

12f6e332be7e8e5f5b3d964326e61601_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 429KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 18.1MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ