f10649b21e5a4221b61d6eeeae3a29cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f10649b21e5a4221b61d6eeeae3a29cb_JaffaCakes118
Size

426KB
MD5

f10649b21e5a4221b61d6eeeae3a29cb
SHA1

f1b91d4e4d221bf16d21738172f663e4901e3bef
SHA256

589249cc575be6660b09d2389376ba3a13e3a48090f146c77f11c61eaf3453a6
SHA512

e0f3bb14d2c23136f238a842aa2f39c88883def822da0a4cb992769c66922d5e2428a97a35acc03e84d1c321feaa90ab1918d71af908f1a5863cd346e86cb14d
SSDEEP

6144:vPVUqV91PIA1TZTjATnCvNOvFFtRTnXArAX5QLrM8ubijaO9Ju2Tk/Wnx+iSl:mqV9+A1TZHhGjdnXmH0Mf+1Wnb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f10649b21e5a4221b61d6eeeae3a29cb_JaffaCakes118

Files

f10649b21e5a4221b61d6eeeae3a29cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ