07c4912b687a3b31cd3b553e8136810e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07c4912b687a3b31cd3b553e8136810e_JaffaCakes118
Size

370KB
MD5

07c4912b687a3b31cd3b553e8136810e
SHA1

c2c88062f2caf366dee218ac396bfe8d1ece58e3
SHA256

1aab90dfe597e5bc8599485acbae1abbbd9d65e592f56087eec6d4b97c984bb1
SHA512

7cd9020e4050a15987b569088b0ff50e7a4333b8b098a5a4dad490cac1b4ab5c7a7a8ee557329e2e931f063f0d65463fd72f7984a79b6aba61c42e7c9308577c
SSDEEP

6144:RcZTE1CehwJv2R8BfFJCOFNnmaIzdWeh3NiqNOpfi8JxBE6oCiCspz9vXq3Ut4oV:GZAhhwjBjNnmaI5Nh3N7OpfxLiCspRmI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07c4912b687a3b31cd3b553e8136810e_JaffaCakes118

Files

07c4912b687a3b31cd3b553e8136810e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lhhack
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE