068324a21459f46d5accf76bf812f410_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

068324a21459f46d5accf76bf812f410_JaffaCakes118
Size

556KB
MD5

068324a21459f46d5accf76bf812f410
SHA1

b979ff470437ce7c0a5c6ff94c4a450fd6c08a7a
SHA256

70263c09a8f3c6cd11407aad8553f2a4e767d76ac0be99804dc1eb3b2eb024a3
SHA512

21b8cdc66aabcad651c94973d69d7e0ddb14f9637a17bbd340fd6bef83c6e7149120cb41237b1af4caa405c77322fa61a1a85748b3ada0fda74cb4ecb4b6bdec
SSDEEP

6144:iexuYHfRLzZo5cW4GKg0/KhD/wVxYvSJzhGtik196Y+MNCqVWe3/frCMwEqME4zu:l3H5G5j4ZK8hMDjv+MAafWMWMcB4l7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
068324a21459f46d5accf76bf812f410_JaffaCakes118

Files

068324a21459f46d5accf76bf812f410_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ