076ebe24701b2904adf158b84a34d540_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

076ebe24701b2904adf158b84a34d540_JaffaCakes118
Size

128KB
MD5

076ebe24701b2904adf158b84a34d540
SHA1

eeefa3582a92889838f0576f1a1bfe2ffc6d30ae
SHA256

7f9c8c2d39e122c90dd9f6242b6b3770205b2c862f2e43952de53235805855bb
SHA512

341654381ab08dd0c5a934a92ad9aebeb42772ef5d77c1a3c8371b07e6f011398959be66e724bc218b54aa3a1710a11b01449bc463bba0b3301b8b5a06563b65
SSDEEP

1536:vaiqH1s+kCtrA2UMT0mTFibDKa1Xm4Us8SCDkS2yC6QI7zhfM2vihUUk/c3LGMD7:C1B31bdBob2QX8sWC/8B04/c3KMDrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
076ebe24701b2904adf158b84a34d540_JaffaCakes118

Files

076ebe24701b2904adf158b84a34d540_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ