0934d3372435438520b3122f413e04c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0934d3372435438520b3122f413e04c6_JaffaCakes118
Size

829KB
MD5

0934d3372435438520b3122f413e04c6
SHA1

29813235a6ff876c1ec1bae5f393025a76e17f7f
SHA256

ef189b7854e0ccce4b00e8c73a3248de5e10d91614ddfd23af4ba98e55975301
SHA512

26a5e7fb2b92b2735083c8cda72f31dec8968780b73fe5d9644a1718ae291451706333db5a735f5afac78bdef1f1b76f763f12285a5ba997ef210850a1d6c7fb
SSDEEP

24576:51b9+RM3ddUjjLpj3SX59L68T4x2iShdBF/aCF:53tOjdjiXv5T4QPBFCCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0934d3372435438520b3122f413e04c6_JaffaCakes118

Files

0934d3372435438520b3122f413e04c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ