03bb720696100d890ce3a91d8dd967b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03bb720696100d890ce3a91d8dd967b4_JaffaCakes118
Size

810KB
MD5

03bb720696100d890ce3a91d8dd967b4
SHA1

51f75a81378518a38795d58ed6bd500d229195d5
SHA256

953e6e2dfdf44ff56a1053a6cf3834a26b3a2cffe8ebad8aa814f50efc20c7e1
SHA512

b568bb83159de9c41dfcd843cd8698ed61809388a65576827a37994925c4337615af24cb50f28a62a2083367e8f0f3a3496b3c0c26cfb937adb2ad8a50341047
SSDEEP

12288:ednEd8Ggcu66J3ZyryGtOhsg9s6TufLk5xEcqJKvHfL97tNyCKdP0fW:KEKN6XVauza2xWzRi4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03bb720696100d890ce3a91d8dd967b4_JaffaCakes118

Files

03bb720696100d890ce3a91d8dd967b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ