a31c7ac1d7d255d252963d58189b225a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a31c7ac1d7d255d252963d58189b225a_JaffaCakes118
Size

4.2MB
MD5

a31c7ac1d7d255d252963d58189b225a
SHA1

e77493df404c629c8d5aea4df32ea3d3da566ecc
SHA256

129dbfd7965d1c39f4d724d85f5beb36e5ab9f1c32234d3af4be905bd6278adb
SHA512

632a847fe2fcb104e7adf69d9d44d3d39231ee95d44b21922aed7f08d19f7673a4d83e7d7b2036dccc4d2821a71856fbe1b0c0652c7ba20c807e21c48368d625
SSDEEP

98304:eh7lpe9VT3xWC7cusXJNwBewxnvjo5qcoZLPhHMUZNp:of+VFW4MWB/i5qcoZLps8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a31c7ac1d7d255d252963d58189b225a_JaffaCakes118

Files

a31c7ac1d7d255d252963d58189b225a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 530KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ