02e94c35cb1516073e4f1ac1d50d7434_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e94c35cb1516073e4f1ac1d50d7434_JaffaCakes118
Size

1008KB
MD5

02e94c35cb1516073e4f1ac1d50d7434
SHA1

84d6191080621c3de555e6febcece4deac307713
SHA256

0c02ed921468288bbbbd6135d8e6e1ccb8255b0b2e1ca75ae9a9eb8d6c8c3742
SHA512

82ee48d765189606f1bc4fff10f43340661828b44291ddfcf5edf2d41e3f16e28cb52a272f68cd8af2aa9053aa7ff6d66debc96d5dd7858fc0df87f9c350bf38
SSDEEP

24576:51b9b8H2XIYC1QGqpZv3PLQ07nJoW1yYpuYXP03HzsXW+guySV:5rPXXcvqpVftCW1yo83TnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e94c35cb1516073e4f1ac1d50d7434_JaffaCakes118

Files

02e94c35cb1516073e4f1ac1d50d7434_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ