10099322b7c51996ed1fa05735572231_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10099322b7c51996ed1fa05735572231_JaffaCakes118
Size

80KB
MD5

10099322b7c51996ed1fa05735572231
SHA1

4d00b41cbe1620b9eec7e7ab99b52cdbd316069a
SHA256

c9ba5b419124487265c6f7092c58f9f98c1ca61dce2a1665ff1a3feef1685381
SHA512

d5bdaee16056c24e916a93051d1b70b82e372acdb60d0013dc680b2629e1e8ed9cc58f7e22c2e115da383c64c0c493a248f669c7325cd65b136018ceadc9fe65
SSDEEP

1536:JdKNk74UnYHKBlMbe9imR2IV2upyDJyPRo9qmnw/nD:KCXYqB+iN2upyDJyPRo9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10099322b7c51996ed1fa05735572231_JaffaCakes118

Files

10099322b7c51996ed1fa05735572231_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 455KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 384KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IAT_INLI
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE