67536178d61f6c80c35256c87be15a3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67536178d61f6c80c35256c87be15a3b_JaffaCakes118
Size

668KB
MD5

67536178d61f6c80c35256c87be15a3b
SHA1

b7bab8285a636bd899151c2ca22da145212d5ec8
SHA256

9c6ce21e372cfa0b35f1f188b243103b27aa70027c4e9609551279fd1a7fec06
SHA512

84e5b62300a53f8278f529db1bf4281acc8fcf68ba59f746b1adc51c727a6f340659e113645da7de5d358dd3ffed0a8557e8e4c8578ecfe559713c9e6ea292ee
SSDEEP

12288:v0519Ps+naXce12xpT+DdoEzvzj9foF2q0T/IbgHV9oyoMZ0fFyYm0DsVbxrfpBM:M7HnaMewbT+D3zvzj9foF2q0T/IbgHVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67536178d61f6c80c35256c87be15a3b_JaffaCakes118

Files

67536178d61f6c80c35256c87be15a3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ