af59f263f83e0a307405ebd5286ec742_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af59f263f83e0a307405ebd5286ec742_JaffaCakes118
Size

2.0MB
MD5

af59f263f83e0a307405ebd5286ec742
SHA1

85493bd30905bd3b08642840c262ae11cad193b2
SHA256

5b34e36432d459fb7cb8cb7c6c68fb812d147a997278d8f3c38489b363f0c7bb
SHA512

9aa89881bf7d26e3284b3100310640b7925ba386cdc5796c43c155b176be0905f66dca8a02f3cf64f42daf1b78670c56418a34e02f144f2efbfda4b438a5562e
SSDEEP

49152:6CC0/1ZndNLjF3cNrDahr9VHawDXNND21:6a/zdNLtd1DdNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af59f263f83e0a307405ebd5286ec742_JaffaCakes118

Files

af59f263f83e0a307405ebd5286ec742_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ