770864eff57b245314f1a2906f997183_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

770864eff57b245314f1a2906f997183_JaffaCakes118
Size

823KB
MD5

770864eff57b245314f1a2906f997183
SHA1

efc10b620d17c60750dd69914594e0e3a2a63c1b
SHA256

184699f220fe0247d81c083daa2b630a048ef74eb86d5e25fcf31aac488d295f
SHA512

fd41334f0c9d1a08aa29304f189a41c453e05bcee32d62f9e27e915b83898a4610754a97c682f8058472aa37babc872d137024b26279d14a2d4a8ff01ea9a4dc
SSDEEP

12288:QWj83NDz05potLH1g/f8U9xhTpeRUHHbeqheTtzZlilKOHYKXtfFV:d83Nv05puicKxNeqcTtNMlKOnX3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770864eff57b245314f1a2906f997183_JaffaCakes118

Files

770864eff57b245314f1a2906f997183_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 939KB - Virtual size: 939KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 311KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE