246b8a3300e87c961b0cb85a1d485597_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

246b8a3300e87c961b0cb85a1d485597_JaffaCakes118
Size

862KB
MD5

246b8a3300e87c961b0cb85a1d485597
SHA1

31f92a80c5c88995fd6c29c75559d428fd1eb904
SHA256

5155cbca08d97a5eaf47b303ecf752cc305bb273308ce79a67bdc4b35d2f41d0
SHA512

4b79dfc44aeb4c3952d7038986d23eff1f0b528b61d400803c732c4b3e78415af9f72b5acf1e9a251420546a4b87604b8a4f2704517efad4f0de9eebdc5ab01d
SSDEEP

12288:mbly675yJo0juRXhT4MghC35C6HWYeOmtHL+Qmznaj1eClK8KbCiZW:R6ca0jux+Bs3HjmtHLXxeAz0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
246b8a3300e87c961b0cb85a1d485597_JaffaCakes118

Files

246b8a3300e87c961b0cb85a1d485597_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ