089898ff1012c5377b6300a465690c51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

089898ff1012c5377b6300a465690c51_JaffaCakes118
Size

515KB
MD5

089898ff1012c5377b6300a465690c51
SHA1

d4f1622ce46f4dbcc285edc65979239cadb42701
SHA256

d0ed0da6d872e4fc00a217806a0811302b86fa5589094db0a491d603c4f4434a
SHA512

cfb134f4331ad40eb58f1b308356ac45a4f865fd0088f38ec50899e7f899ce650c2f25f9d44019dda4eada0552544a9b436f6ba782461af78f52eec473133a20
SSDEEP

12288:7WmAFq4q0mxbaLR3wZ2af6P0oIm2Ja7ZQXhgwJQRVTt7caZ/k:7WmAFubSVwoA6co3ddQJUt7caZM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
089898ff1012c5377b6300a465690c51_JaffaCakes118

Files

089898ff1012c5377b6300a465690c51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ