e75b970eabb39e168ca4b767f1607858_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e75b970eabb39e168ca4b767f1607858_JaffaCakes118
Size

1.5MB
MD5

e75b970eabb39e168ca4b767f1607858
SHA1

513d05628c843550155590b331a5fffee4bd7fbd
SHA256

e90fc391fe5abeab624f0a2610cb10752b6b42225b7d08844c9232380848c3a4
SHA512

9be259c02310469504fe366afd9dc5c6614c389fc97d0fa2c1635422815224cb3f47536fb5bc59e35f7a294bee445dfb118b4815d72931e7113b32e3471d75d3
SSDEEP

24576:oDtVVhMqTmiYfpCUc/W1ohO8dEC+O0a8qW2z5LvCnknd9K3:oDHzCftcqo1X+g8p2Fenke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e75b970eabb39e168ca4b767f1607858_JaffaCakes118

Files

e75b970eabb39e168ca4b767f1607858_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ