02979e563eb1094b21e0d7f6a6b385d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02979e563eb1094b21e0d7f6a6b385d3_JaffaCakes118
Size

604KB
MD5

02979e563eb1094b21e0d7f6a6b385d3
SHA1

34d0b97057b44966904515c4e38bbbede45aecb4
SHA256

4e3dc69719656f84e9dd6a1b1ebd0e15dda0c5f604fe2372453362da81e9ed06
SHA512

d6bf213748928acc29b1234db608f9e1994328d774d61fa0a1b7f17f8c90ae20d454366aef6126f1cb99d8603851a5340362494403d79789fd4d674e0d5781ef
SSDEEP

12288:rRyLSFkU4u/n/t0EW5A0zyzvJwQ5oAlK+GqGvrhIk6bQQ52LuRg08jjV/ZB:FKNU4uf2EW5A22Jr/kEGvdIk6Bm3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02979e563eb1094b21e0d7f6a6b385d3_JaffaCakes118

Files

02979e563eb1094b21e0d7f6a6b385d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ