73361b18e55a83fc96d5c39a43d00203_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73361b18e55a83fc96d5c39a43d00203_JaffaCakes118
Size

900KB
MD5

73361b18e55a83fc96d5c39a43d00203
SHA1

d26429d9e7d86ce08e92d059f5661b4ae968279a
SHA256

706731235b6380d53f40817fcb3b21ad784e04fd07f959e6cd08217f8b8d9c86
SHA512

3ef5873bebd51071ebd4fb4e85f9367b9cc277667f1d8a87c106eace34582497950b1b6e47b2b84119a2990578e9b07bd7c3061288d1db5fac19d92fc70aa810
SSDEEP

12288:ZB0865T9/Dta/1QMEZHpsUIKHi81g3Pu4WgjGydVps:7g59D4/1QMEXdIKR+PvWgyuC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73361b18e55a83fc96d5c39a43d00203_JaffaCakes118

Files

73361b18e55a83fc96d5c39a43d00203_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 428KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ