02cbea5c0c99b087aa4793bf172afa13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02cbea5c0c99b087aa4793bf172afa13_JaffaCakes118
Size

757KB
MD5

02cbea5c0c99b087aa4793bf172afa13
SHA1

0e1aac02fc4eca0940b45dfcfb21fb65569c360d
SHA256

5dc4aae58aae5adff2347a36e2838b96d70c98002ac3e0a107649ccc2a312d1a
SHA512

022c8f258b7be1a8083b15be77cf1d693397070dcc274309275b1d24dd7cdd91601ecb0da91f8824f3cdf697ca408d6d845a7486c3dd0300d85d176927d8a022
SSDEEP

12288:YHCsVXKQkKVM8YjxvU17VW5AFAIck9g5GiIaa2ll4De71mdvWLegBFIkaB0Xx5d0:5b3xvMVW5AFOksHHCi+voFIkyCm+NQrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02cbea5c0c99b087aa4793bf172afa13_JaffaCakes118

Files

02cbea5c0c99b087aa4793bf172afa13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ