01fcfc30ea026f69e711583b2a54964f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01fcfc30ea026f69e711583b2a54964f_JaffaCakes118
Size

341KB
MD5

01fcfc30ea026f69e711583b2a54964f
SHA1

cbe30ccc11eee13ba9456086b746ffddf61038ea
SHA256

02e55f284c80f0318ad9501a9cf2beae6dea2894c61a70c7a15b61f38e15eee2
SHA512

0e98b12b5290b7846e90a2492990b1500e1fec813230a20059e71195b1082fd4023a1cc9f0db70ac20942d63521451b908cc50c5118d538d1dff87d52b89165e
SSDEEP

6144:z8tvJToVLWspTTyU6OFLEeyVX29Bp2xQDkPIReqQjTBQiCL:ACVLWspiTiQw9BAxQDkcQjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01fcfc30ea026f69e711583b2a54964f_JaffaCakes118

Files

01fcfc30ea026f69e711583b2a54964f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ