1016022788b7e4cab9d84b4950056a51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1016022788b7e4cab9d84b4950056a51_JaffaCakes118
Size

681KB
MD5

1016022788b7e4cab9d84b4950056a51
SHA1

df808a66f90e43d2547f4e454032cc8497d9f3b5
SHA256

1225950d15c10fb45f7c56591b2d0b2182da3ee6d69e997705ea63e8a61957a8
SHA512

207904c3874d91734ef24062c3d8ac2a9b572345d204c706341142993f295c010311c00cccf42e6fcefbe7c44c33fddadc6d4fcdc78ee65fedee0fad36a5ac65
SSDEEP

12288:KF+vv5bHnjMEUBFsyTGhNL6IkOo5RCNuHcaxn8TYM68H6TA4WDBh:usxUEMFsyTcuPzvCNuH78TYMws4EBh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1016022788b7e4cab9d84b4950056a51_JaffaCakes118

Files

1016022788b7e4cab9d84b4950056a51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 501KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ