97b89fdd43fffa8be4ed83ed3806614e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97b89fdd43fffa8be4ed83ed3806614e_JaffaCakes118
Size

725KB
MD5

97b89fdd43fffa8be4ed83ed3806614e
SHA1

15bef787ac7983ed19782a2f486b78b51b5d907e
SHA256

75368eaad0d460ffdf48c9e30cbdfc4ee80397405e687adba8f04f696b1df59d
SHA512

bba9f8a5d2ffc104f8a662c1dfaac90e8c5c64125bb3bbaa0ff99912ac0888cd996900a819c09ab2b74a5d92e6c033c1970dc6d53ce8477caa6c2581badd4cf9
SSDEEP

12288:yXmwRo+mv8QD4+0N46/XRKmqGFase5+mFgUM/5nQV3omsiUcpsysMhAhd:yX48QE+UlXRfqGAsw+GV3om8gsMYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97b89fdd43fffa8be4ed83ed3806614e_JaffaCakes118

Files

97b89fdd43fffa8be4ed83ed3806614e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ