f07ea483fed343d42adbf0cdcb9cb2fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f07ea483fed343d42adbf0cdcb9cb2fe_JaffaCakes118
Size

348KB
MD5

f07ea483fed343d42adbf0cdcb9cb2fe
SHA1

283e60b9d759570a55e4fac9d45df08c04311999
SHA256

e4f5575074eb23e096a02cca303ee9a776a397a45c1023ac88ad2b6c639e9156
SHA512

ecaf2a79e6643543612bbb16f24ea4680e75a2fd9407815e9e6ce858d37d7af4193139a675cca80666fea7813dce453b2b058f211fd781185af2f421e0111f00
SSDEEP

6144:nt4SRrV9VIgKsXrb64SIg0Iw2o7ShuUMYRdNGh6CDxdvCtqzQHj99o4IQ65EsZJh:nNx9VIgKsXrb64SIg1o7ShuUMYRdfWtV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07ea483fed343d42adbf0cdcb9cb2fe_JaffaCakes118

Files

f07ea483fed343d42adbf0cdcb9cb2fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ