0105082116fd3ba2dc0bb5badc5b9cf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0105082116fd3ba2dc0bb5badc5b9cf1_JaffaCakes118
Size

208KB
MD5

0105082116fd3ba2dc0bb5badc5b9cf1
SHA1

1ae40e7347377b5eec604811b5272b3d1fb63ced
SHA256

51e8b7255ffa13f9048f44be65674b0e7a434549c846f821d10d26cfb2ca427f
SHA512

dc7ea5871d22345cc7bb6a465df02af4f1eab26e1929ba3da5a68a43d5e90f8750348359a19d37941589f1846ab7b6d9f94e361a089168e4a45069cdbeb1b7d4
SSDEEP

3072:+ehvZ5uwVI0ecqWHtAYRmPa0Ryh/rpTGVVx6f9vlimWNnI/o8wOQn:nhvDpG0SXRy3c6vnW1x8w9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0105082116fd3ba2dc0bb5badc5b9cf1_JaffaCakes118

Files

0105082116fd3ba2dc0bb5badc5b9cf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ