616c09fef0b47187103ef084c1a2e2bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616c09fef0b47187103ef084c1a2e2bd_JaffaCakes118
Size

528KB
MD5

616c09fef0b47187103ef084c1a2e2bd
SHA1

a4d369e83511953096328e77b760fce3edb2b853
SHA256

f208e89d098a246a4251dbc3b281280377f437c29941976e1a99d309259ce0a1
SHA512

9e0b6c24d4721f547c5313f19867c15543fdde72f42427441999a4943de955366be3e1dec9f41f532fec329d0f67f15012862b7cf2dd45718dff0c9b0ba8500a
SSDEEP

12288:dCjQXRbgWedZ4LIQ+K0wh2DhqpnAToZcQmHg:dCjQzLkQx0wS8cQmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616c09fef0b47187103ef084c1a2e2bd_JaffaCakes118

Files

616c09fef0b47187103ef084c1a2e2bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ