aa72523ba505436812d0a3caec3d311e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa72523ba505436812d0a3caec3d311e_JaffaCakes118
Size

967KB
MD5

aa72523ba505436812d0a3caec3d311e
SHA1

ec725c63db3aed798d3094d5e5623acafaa42b92
SHA256

64bd97f9634dccb78ac41523d59d830090ca484b47afe2912621155fd268bae2
SHA512

a74afd8b74a84b423c0847459855be29fc880115a9c6d156fd480ea93acb7360267c06b3c0d0fa91d7ff7b6a84009770d5966beb586e226d5acfbe2b04e41c1b
SSDEEP

12288:uK1XZb3DqMIf1s9IBwEXjwRcB16ojDAVh1DcAqJRwB0VYucypBodgBtv1K:uK73DfIfy9IxcRFVh1D27YwpKdgPdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa72523ba505436812d0a3caec3d311e_JaffaCakes118

Files

aa72523ba505436812d0a3caec3d311e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ