01f917c3c26c6bf1d4974b5925e68c47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01f917c3c26c6bf1d4974b5925e68c47_JaffaCakes118
Size

827KB
MD5

01f917c3c26c6bf1d4974b5925e68c47
SHA1

475ca71ccd72ea7ecd62a60059d535cc28e651a2
SHA256

64b4a4d46a537c1b57c1f733e48b58538851a24752ce1f7c66be6913f7c1afe1
SHA512

70d6aa2e0481c6e7892fa4f63bb660996d4dcd6a5bbeb33a88a13fcf051af77e1a5791ba49021b5a95a16dcc2eac400090eea4cf3d78106e019b99be01d38528
SSDEEP

12288:adILFGmy64li+V7jjik56fc8O64tii7EybM7oEDlMyjL3iL7carcW/F6SVA+PXC:uQShli+1jX5cys3MyjL32QQcOFo+PXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01f917c3c26c6bf1d4974b5925e68c47_JaffaCakes118

Files

01f917c3c26c6bf1d4974b5925e68c47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ