13f83f7d0006cb5ea2caf94313bb7b20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f83f7d0006cb5ea2caf94313bb7b20_JaffaCakes118
Size

7.9MB
MD5

13f83f7d0006cb5ea2caf94313bb7b20
SHA1

ad63889ccf7064edf4881beae7ba27f6612fb147
SHA256

87465f38baeb7728e505257dd1fab2023b246ff08d75c925decba728983bbdec
SHA512

4da7509fbca9629899b75901e3fa8f88dbde1461e92b97d205a49478278feda5242f1c12e3275942e514035174dd3a642fc7b2f3d9c015f328d594d1dc4c156b
SSDEEP

196608:8oazg7DSmoazg7DSmoazg7DSmoazg7DSN:ag7uIg7uIg7uIg7uN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f83f7d0006cb5ea2caf94313bb7b20_JaffaCakes118

Files

13f83f7d0006cb5ea2caf94313bb7b20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ