c793d8e8c27d61a31adc17845b80d340_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c793d8e8c27d61a31adc17845b80d340_JaffaCakes118
Size

13.8MB
MD5

c793d8e8c27d61a31adc17845b80d340
SHA1

ef66c35db293d36d70577ad568ff5b86d044c375
SHA256

cebb6db6def6be38d7d9bbb3d93860ecef363cabcd3b26ef2b2d1e854145d54a
SHA512

8f2bfe0a30dc2a967718f10650660ff6b6177ce160b4923aba9edcc4c49db4f40593455a19e486a8122f61b976bc9e8d84a7c5133f270ae1d05ff3f2a194c319
SSDEEP

196608:88azg7DSm8azg7DSm8azg7DSm8azg7q8azg7DSm8azg7DSm8azg7DSm8azg7p:Gg7u0g7u0g7u0g7Qg7u0g7u0g7u0g7p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c793d8e8c27d61a31adc17845b80d340_JaffaCakes118

Files

c793d8e8c27d61a31adc17845b80d340_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ