f03fca73acfff6414e49efedf9200e0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f03fca73acfff6414e49efedf9200e0d_JaffaCakes118
Size

6.8MB
MD5

f03fca73acfff6414e49efedf9200e0d
SHA1

6d3cc8d1dba183fc36cb8088d89dff82142b9c8f
SHA256

2eab2fb6ff17455768de3dcc2c774e97287a61cee6498f9af3230101717e5dd3
SHA512

3a13f17418c2e8f92439598957e9baf3d6971e68fd41dda3f4c395af980b904a947ea0cfed75a1e533c9bbd61fb7479eb2102a36198acc3a307c06f73cb4ac66
SSDEEP

12288:dD4sGKCVs+pemZryLZlO7VlGwPkPtFFt8nOPrnSZlQgI+kzeGTM9:2sXCJpe0corslFlzn4DI+CM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f03fca73acfff6414e49efedf9200e0d_JaffaCakes118

Files

f03fca73acfff6414e49efedf9200e0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ