1647379f7b5860b37ae5dcecda0ae19f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1647379f7b5860b37ae5dcecda0ae19f_JaffaCakes118
Size

619KB
MD5

1647379f7b5860b37ae5dcecda0ae19f
SHA1

41526c700e3b2ea7d4d352985f4f95b071507dd3
SHA256

a81e551126d53a84f3bbae199432317fd5404f689735b0bf707dfb7535980bd0
SHA512

7e181f76eeeda45e0cdd49d9aef19c866ea2e7bfcd051d6d7828c8e2c279db34e4fbff8b4f5d3242baf45cea21ad20977672bb89d7bcd6c7d2abb51a8441ad30
SSDEEP

12288:cTkjM3NncozVjB+l9EPYAvuX6MdWbxUtvZTc+NSDDtCqLu7h0BMMrOQM:cAA+ozECgAu64vv5cmSDDsqkhiROQM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1647379f7b5860b37ae5dcecda0ae19f_JaffaCakes118

Files

1647379f7b5860b37ae5dcecda0ae19f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ