05177b9a51bf5a2a0f88e3e0795a129d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05177b9a51bf5a2a0f88e3e0795a129d_JaffaCakes118
Size

61KB
MD5

05177b9a51bf5a2a0f88e3e0795a129d
SHA1

8891cb200c430b458017f9d7de4af3c96f76c9b0
SHA256

50214c9e513dad945033cebdf72a6ca7bc2558146ce25d06e1f31bd2e4007772
SHA512

24fb94f98ca69ee0946889a5744e9143c46abe93b88c81d52880ee551dff11efe33405b5c30734119e3ebdf0ad45089ff4931cc798770d0a6d0d709a57929d64
SSDEEP

1536:0vGqldFspiPtc/a1JMqqU+aS2A1hfXsk2if25V3NxJfTtLgt52SH:0fdFBbMqqDa/shfckP25VpNgjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05177b9a51bf5a2a0f88e3e0795a129d_JaffaCakes118

Files

05177b9a51bf5a2a0f88e3e0795a129d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ