a19359c292664e42fa3a5623a628d722_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a19359c292664e42fa3a5623a628d722_JaffaCakes118
Size

185KB
MD5

a19359c292664e42fa3a5623a628d722
SHA1

bbf990d9fd7b880d1fe691ef77d8d7e9e016c2d2
SHA256

bbcd45663a46e4f93e0bb0806ea60dc6268b4d51ded901309db00b9ca6ca17c6
SHA512

16b34721f3260931cfee912589ca36b6aa0414c5d10041c602607e09e2f90e9c4db7fee0e2ddb7421bcd0583bbe9e4153044b47a5fa787978faefe84364e2322
SSDEEP

3072:xjwKgQY3zCt2wGNo2Z+sdLeIH6+aMVrEgD/y16SnNZTGOu9GBL+FPZS294v01WI6:GQYE2wGNNZ5dL1H6ZUwgDsTn/GOg2+8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a19359c292664e42fa3a5623a628d722_JaffaCakes118

Files

a19359c292664e42fa3a5623a628d722_JaffaCakes118
.exe windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 1KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 1021B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 601B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 909B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ