f653df7d9b4a01aa14611a4102599305_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f653df7d9b4a01aa14611a4102599305_JaffaCakes118
Size

491KB
MD5

f653df7d9b4a01aa14611a4102599305
SHA1

c91006c7ee7cc541fba2f00a6fd387a0cc1b6bb5
SHA256

e7622386d5a5dcc4cef4b449cd23c417e9af95fa39efb9825e79f250e4abff82
SHA512

c7bd2f71ab14cfcf6b7c8d862ed3ee4495cc38400327d2d727f8af5baedd0bee745c41ce316974a90db3a317e56a049699d730a352367634e03437758bf93b67
SSDEEP

12288:wH5D4o9bKgZS7I2VqptpHvwsFi0zJpWR:S94TgZXDZpTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f653df7d9b4a01aa14611a4102599305_JaffaCakes118

Files

f653df7d9b4a01aa14611a4102599305_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ