012419f3b714b195f13e738213516831_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

012419f3b714b195f13e738213516831_JaffaCakes118
Size

3.7MB
MD5

012419f3b714b195f13e738213516831
SHA1

802d7e41d1ff1042c703222bc44eb206fe67f728
SHA256

016f0a503306969e693671e733d7fed7039af287eb1eac8b834f10125388172f
SHA512

961edea0c43e34db3b36d1af294f96a7acbbef6eaccd2de9c9d9041c098d63b486cea6f3cfdbeedaf0c25a8bd361237a8f47ce243f3f642a7a40bb87f759aaee
SSDEEP

98304:qAF1DrpOGita0djPwKYmdJg1oWN2oHSRErmNs:qE/Pitmk5oHaErmNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
012419f3b714b195f13e738213516831_JaffaCakes118

Files

012419f3b714b195f13e738213516831_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 64KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 240B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ