aa0689b1430fb4223a202fd4d6117fe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa0689b1430fb4223a202fd4d6117fe8_JaffaCakes118
Size

615KB
MD5

aa0689b1430fb4223a202fd4d6117fe8
SHA1

f56081fe280ad1144a41824ee37ed1b2ea461cb2
SHA256

74b3450aa8df6ab1fed9d92ac1bca5ae7d11bee3364b4acef8d1553daa19d324
SHA512

e070dbbb5668854ae3b9780780e807fdb512c4e635731e055c84c0f827d58164374356b19b600321829eb321ce99128cc4f1b72f8d9408763a631cefb5c17083
SSDEEP

12288:qGrLNSJa5ssr4f0CIPdhLpsPEEoUNR4sp9DYPqTT+1ev:9F1OsrRtfNEVNOC9MPqTT+Av

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa0689b1430fb4223a202fd4d6117fe8_JaffaCakes118

Files

aa0689b1430fb4223a202fd4d6117fe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ