a234806fdb5780dc521f29db73836dfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a234806fdb5780dc521f29db73836dfd_JaffaCakes118
Size

887KB
MD5

a234806fdb5780dc521f29db73836dfd
SHA1

f6c42c43cd7626d2ebe2f183de7e59ff8a70f34a
SHA256

4ead49976f1660a17149b79d1d3bdd11b186406801d8fad5a85b8a7d1e749f67
SHA512

98814df7dd24e17c7eccfe15a1ab741830e61d1397062cf817865d1213ad4ea7747d0a02c129752f4578116b156d4664bd6c3989b83773d97b6c231a410ff1fa
SSDEEP

12288:PHlYcrKanXHzeEjMx6p4ddVvjUip3GKfm8LonZkPaj94g/fLrN2huKIQkGTous9Z:PF7OuHzkK4d7403c8UnLNeDsJ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a234806fdb5780dc521f29db73836dfd_JaffaCakes118

Files

a234806fdb5780dc521f29db73836dfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ