f27f5ee5bbfaf74f7e2ca47126e0e3a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f27f5ee5bbfaf74f7e2ca47126e0e3a8_JaffaCakes118
Size

660KB
MD5

f27f5ee5bbfaf74f7e2ca47126e0e3a8
SHA1

903e64f51ed92e2ec68d3ab01bf5a4c37ee2a101
SHA256

e16eeb6e63d8987f824743e32dc76c80b1136dd2e41b1f6cec9bb05d23529c5f
SHA512

23a62a153778f303de91d167d12c73f4f39ccf7a30178c04b4818aae83e6babdd8a93af76c7f3f07d09d1f9094bef8eb4de72312fe918d3178769fa6ea0b18ae
SSDEEP

12288:YXWmAF3Bq0mSJGLEZUki07gbwo+pP7Kb2S2FIisjFYBWVGghoTFhZU0TL:YXWmAF3mGUbwo+pP7kFZGqeFhZUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f27f5ee5bbfaf74f7e2ca47126e0e3a8_JaffaCakes118

Files

f27f5ee5bbfaf74f7e2ca47126e0e3a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ