f0106501a524cb3f86178dfea4c16405_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0106501a524cb3f86178dfea4c16405_JaffaCakes118
Size

1015KB
MD5

f0106501a524cb3f86178dfea4c16405
SHA1

425205c6e8ed649d3dfb0a04c44abbd160b51c61
SHA256

c64fd7d90744eecdbad88f6add0d49c8aecdc1ee989766c88937c9b57b891534
SHA512

9015b7e70cbcecb1671bb0522d36fded16e7c25a707a453e58e4ad2bfb71946d6d3749abc0a65f61a0a626bf848d8a29aa168b3dd07672d2b4e52d19c53714c1
SSDEEP

24576:sKHvAbpdD2iCp+t3V0w4tsA+og/3pPe2bgnBlZ:HouNp+t3CxR+b5eI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0106501a524cb3f86178dfea4c16405_JaffaCakes118

Files

f0106501a524cb3f86178dfea4c16405_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 9KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE