167592ec668d7afb744635cdb379a26c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

167592ec668d7afb744635cdb379a26c_JaffaCakes118
Size

809KB
MD5

167592ec668d7afb744635cdb379a26c
SHA1

c075ef03ac623245752ef635b745dfa09e0100bd
SHA256

539105722bee829d03c641e38a317f6cc78d76587fe10beb59377c06205fc921
SHA512

0865209384416df5497d228af3b42ec62018805f71dcd31d567e9babfd3e38da46800f2322a63a24a59b2200fc32337fae32555fe93d5da4e7f15f29154bd937
SSDEEP

12288:onvp1lEbHI3Xy1GnlcIc6o+DXuimcU2GIll/5fMTRSKuFNBgz3cE4jqmKApHMKqq:onvnlZ3XygNM2uLl0mjurBvD7KwHM6NB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
167592ec668d7afb744635cdb379a26c_JaffaCakes118

Files

167592ec668d7afb744635cdb379a26c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ