02aee3eab6f0ee54b18c595329f1c2f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02aee3eab6f0ee54b18c595329f1c2f4_JaffaCakes118
Size

1022KB
MD5

02aee3eab6f0ee54b18c595329f1c2f4
SHA1

400163a9ce94c8e1c15f4407d5d3f804fd12d5bd
SHA256

ceae6814e28f56571eeb85ca301812502b2132449e48f7780c1f0012ade7067f
SHA512

1c35de8aeb732a8067b7799e990d6beb96697db789ee3615684c98a3a16058c6620d7bcc1dabdfd2154149eae137a30af882954cf1fee587fb8d371e663d550d
SSDEEP

24576:XTeohPM6p3HLvxmvMXGh4DGUH3HIIAAt:XT3r3LsvGGhKXI3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02aee3eab6f0ee54b18c595329f1c2f4_JaffaCakes118

Files

02aee3eab6f0ee54b18c595329f1c2f4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ