505b09cc0cc95b11352cb433ae837964_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

505b09cc0cc95b11352cb433ae837964_JaffaCakes118
Size

50KB
MD5

505b09cc0cc95b11352cb433ae837964
SHA1

fbb737bdbf679d69e056fb08d938224332b950fb
SHA256

636f24e39c7c782db439d7da2b54507a03bee5795843d5912192b73315142902
SHA512

780930e47cdbbb977fec3b069abd92263346ca2512fc78668eb0d399243af8dcec9aa186ab66f07eeb0d130b851f863c26e735bb02f348650a6ac9653dd41959
SSDEEP

768:xKSmX3MVD4GXZEyuhhq5Db3QHGVkK/8KU6s47IOhw4RkcBup3lDOZvDm2o92y7PS:QBAp5XQHGVkXKGY+4ecBU3IZyVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
505b09cc0cc95b11352cb433ae837964_JaffaCakes118

Files

505b09cc0cc95b11352cb433ae837964_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ