0647ecae8a2e2a9db408ed14262cb520_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0647ecae8a2e2a9db408ed14262cb520_JaffaCakes118
Size

1.1MB
MD5

0647ecae8a2e2a9db408ed14262cb520
SHA1

e90af2ad6bbc81ce3981c8c82fa5ae4df613b828
SHA256

993e72fb34786833baa1611132b83c0007ade3ea2e1789667412f38749a551ac
SHA512

ac3ce326132d08851310a7ecb787dbb81afeea0fe70ea189493284986e978a6f1dac66141a6f8d34c89e3875ef1504029093055d6023a4e9ee22fd052a40ac2f
SSDEEP

24576:b1bL0DXtc1xP3bvn8qbDzhxzr6UQCKXhiL5V2mi4bDdJ:bmJc1xPL8qbD91rMXh/OxJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0647ecae8a2e2a9db408ed14262cb520_JaffaCakes118

Files

0647ecae8a2e2a9db408ed14262cb520_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ