ed361a30c4d915232f0f5597b81ae514_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed361a30c4d915232f0f5597b81ae514_JaffaCakes118
Size

555KB
MD5

ed361a30c4d915232f0f5597b81ae514
SHA1

538a24b90e3cecb2537f960e586daf321a324ef9
SHA256

8cadf04f95b958eb25e862fcb5bad8283fb4e0be597b2450b08ac4c7439c3da7
SHA512

d617b3cd551d50cb3bb5d639e506ea26c25e6eea01ac21a2c331874d2b6d08d925ab57e2c831757ab4c44eef865ed3e47a3a420304a4a71e19b856459b054f59
SSDEEP

12288:u/ObpUa8qUJiMF3Z4mxxUO+7/MvkDHaakZU:tpUa23QmXxQ74q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed361a30c4d915232f0f5597b81ae514_JaffaCakes118

Files

ed361a30c4d915232f0f5597b81ae514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 532KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ