01f5c4f040ef38a74e6d371e3dfd38c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01f5c4f040ef38a74e6d371e3dfd38c1_JaffaCakes118
Size

625KB
MD5

01f5c4f040ef38a74e6d371e3dfd38c1
SHA1

ca0cdb2bedb1a28e3dfb0ce6ab6034a043a5d060
SHA256

3025d96b68815b1d132651883af5021c96345a57a18ee0bc3aa7a11b45d02a43
SHA512

42a4a1a462a57ef5cd6ea680a845c8fb90c60291054759514d7c22788cee3e9d49f9220e4904a0b0ba1f17ebbefb8728a0cb49570282f99c4a195a3ea34042ca
SSDEEP

12288:xb1Gnww0X7MxGdm8uesKIe/SbGyEvS3UXauSFO5B+7RTt:x5EDAMxGzuHa/SbGoDRFO5BORTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01f5c4f040ef38a74e6d371e3dfd38c1_JaffaCakes118

Files

01f5c4f040ef38a74e6d371e3dfd38c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 395KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ