085294f6af8e57678098eef94bad7d4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085294f6af8e57678098eef94bad7d4e_JaffaCakes118
Size

67KB
MD5

085294f6af8e57678098eef94bad7d4e
SHA1

b98f30d4ca87278e1923bd3bbf82d7416cb26210
SHA256

6ff1dc8d5d8b0af8588f39c51c7758ce39b7856a4fa676bfec5114d0f67e2abf
SHA512

fe0b003c4eaf37c2e6354d2a0399571e459b56a97ddcc0a5176c0bffc7a6b7a2cdb5e4a143f7964184e1868b7135d41f140b38e29fc042e482b7417fa438a650
SSDEEP

1536:JQ2KxVmr0YpSHx1biyex6IXoJyx+27QrWdkCc0XwWeBe7:zK00YpSHx19ex6CoI57cqkssBu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085294f6af8e57678098eef94bad7d4e_JaffaCakes118

Files

085294f6af8e57678098eef94bad7d4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ