32520f9cecaad88ce6a5b62752d5d6a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32520f9cecaad88ce6a5b62752d5d6a7_JaffaCakes118
Size

2.5MB
MD5

32520f9cecaad88ce6a5b62752d5d6a7
SHA1

458cb66166b843a21b3701b5d6704b15a4946567
SHA256

4197dc1e78a57e1ae5ee341a034a5776f2c558d2cc23511d078d72dadafae930
SHA512

c446af6212aaddfde819f71b6a6f9fa700b23662eb0f2ab9fe4079d6a1bb0d624642ffca4923e64a301ce9da0979d669027d07f76c38842b83b0ddb7c23d826d
SSDEEP

49152:LOeXmk5ODAmRMJJE3cTOYR1R1wzqEY8m8Z2XbHOjCY7F5tNqptQ2ov8uDXT3TH+v:LOeXmk5ODAmwJE3SHD1wzqEY8mBbHOjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32520f9cecaad88ce6a5b62752d5d6a7_JaffaCakes118

Files

32520f9cecaad88ce6a5b62752d5d6a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE