f0f7199e795272d82ea7b93050fbf256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0f7199e795272d82ea7b93050fbf256_JaffaCakes118
Size

592KB
MD5

f0f7199e795272d82ea7b93050fbf256
SHA1

a5e6d23f626f5cf1908fbb3633361067c20bf9c7
SHA256

5da8c895e4e1bff43c8f0920ff58a5ac44eef6fc89b1ba985edf96bd0ae47015
SHA512

8faafb33d4a71a5596244fce64e31de55fe69f78635c013e3f9f7ca97549373003e0f332836b76b89cade6fba3e4df8cac0036667a13e7cdace81cd4891819f6
SSDEEP

12288:HtOSJpWFJj39z5PTLEo/83hUCsBfAnJ42wArtRLG7f5:Ht1Pc39zpT3/qRMom2wAZlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0f7199e795272d82ea7b93050fbf256_JaffaCakes118

Files

f0f7199e795272d82ea7b93050fbf256_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ