70e86983daf57f02d75ec8505a483ff9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70e86983daf57f02d75ec8505a483ff9_JaffaCakes118
Size

730KB
MD5

70e86983daf57f02d75ec8505a483ff9
SHA1

37ba9722bb380c64eaa3f035ce7a4f36e9a6a096
SHA256

2cdc69e77ad044bd97763190ef62ee55ad75f5ccc63bb5b18b1b8d74d0186488
SHA512

fdeab4ee10ec8163e0e4fde20f04292aaa90557bbf20d08fb72a440092566bbe7af7ba1a053cdcdc8919e7c7520c79248e2cbddd3676b9b29c08d2cfded89a77
SSDEEP

12288:nQj8+gtrnCHQRIT2+73+DDKtEi2LxmXNkh9+UFn1ScxFLpjV:nq8xWT2+XL29MyGUFcsFLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70e86983daf57f02d75ec8505a483ff9_JaffaCakes118

Files

70e86983daf57f02d75ec8505a483ff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ