0970d9ba2d9f5ed6a101514bf08282d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0970d9ba2d9f5ed6a101514bf08282d9_JaffaCakes118
Size

679KB
MD5

0970d9ba2d9f5ed6a101514bf08282d9
SHA1

3c0b6b1ab4e7a82a11c0953952e2cf0fc6821e2b
SHA256

9f5c6511c92efb7849b44f4e3a688c49fa90d323343ac75241bd88bd5683a2a0
SHA512

c8367363212f48c7e1a86ab338ddd0e82f1c4bf33a2daa52531d7ea79efc7a553a4faeb77f4f8ad8c76a4bedbb245071132b189c0aa6efe38913cf7fde5f8c7e
SSDEEP

12288:51bAcZuDbe5BJ0htb1E16AJm/RteLzdVYMWadDeF9etPVhXiwNhFe1lxdw+9KOux:51bLBJkt+1N+tetKLaYDCPVhywNfejdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0970d9ba2d9f5ed6a101514bf08282d9_JaffaCakes118

Files

0970d9ba2d9f5ed6a101514bf08282d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ