f005379b2c7f70c8705b57993d8d03ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f005379b2c7f70c8705b57993d8d03ef_JaffaCakes118
Size

184KB
MD5

f005379b2c7f70c8705b57993d8d03ef
SHA1

3b96fed6263369972f34defb1c7ec74acc495f35
SHA256

14e5b8d45b8069bcd25b64ff943ec895fa18d87d2616495950206822b77949b6
SHA512

d4aea2795af4a500a9021e4c785264050262c1ce178757c5dd3dbe9a5a0a0f50d2799801016922e677ee138af0b4069a51a7f49048526928a82a51e5dae0d7d7
SSDEEP

3072:AMRlobbdaL6F9mzobXiYu9ldPXBGASo3AN/CcydTKSKMNGqp+:DlcdiImkbXidlhXBRlc6D1p+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f005379b2c7f70c8705b57993d8d03ef_JaffaCakes118

Files

f005379b2c7f70c8705b57993d8d03ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 479B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ