0583186a065e9816d776327564d19573_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0583186a065e9816d776327564d19573_JaffaCakes118
Size

86KB
MD5

0583186a065e9816d776327564d19573
SHA1

9f65cb7ff266306041a16e826d84582cca520b41
SHA256

372705bab04e3bd2fbf99887e4470df41d670fd1fab6991ebfebb2b1a14c74ea
SHA512

3fc201a210f44b18bdb0ec906b4e963302492e4c219a3e81a286b43b0815de4aaa3e4a66999854f393078424ce182c365b2760c463c2fbc98854900e0460339c
SSDEEP

1536:mbqTQxBrGVnH5y6YDKvYJKvNr14eqNGxO4Rqu2tQhVe:BUdSnHQ6nvYox9qNGxO4oae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0583186a065e9816d776327564d19573_JaffaCakes118

Files

0583186a065e9816d776327564d19573_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ