f92e339450616229ce33f8e755800997_JaffaCakes118 | Triage

Sharing

General

Target

f92e339450616229ce33f8e755800997_JaffaCakes118
Size

605KB
MD5

f92e339450616229ce33f8e755800997
SHA1

63eab30c549199dc8256644d4bfe922b7b3cb23d
SHA256

76cb9c6c6910799ad29cfb1a57d396f6704df89756d8543899ceb6b99911ec3a
SHA512

25a35f322f548129a64fbe4c0ca33f65ce06553ecbc7a80bdaaf39ea92b71f3f55ec79ff7ee197431d066ed67bbd84d7ee3e228659b8d13ed21883bf1c6d57a2
SSDEEP

12288:XPK8ksl3i7i77Mco4F+xQw1kmpW28wPXczScBx9Q+Wtw:XPjka3i7i77DgQw1kL2lPcXQ9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f92e339450616229ce33f8e755800997_JaffaCakes118

Files

f92e339450616229ce33f8e755800997_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 514KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ