10404691bc7cfeb2e5fd72fe8a2659f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10404691bc7cfeb2e5fd72fe8a2659f5_JaffaCakes118
Size

751KB
MD5

10404691bc7cfeb2e5fd72fe8a2659f5
SHA1

050fb6877440e118599c333cd06ca4e94e5f4dbf
SHA256

f57627f668930c2606f213385faa31a97358d7cb024abdc24d4c3cd2ef1d68d8
SHA512

6d71427043e2d06984f55e138636c6924a7bc50e9a06ef18855942fd66cb3b213feea3db04c8a35022bfaa7b08a0e233ab19d1fceab07184b888e073ff9eaea3
SSDEEP

12288:UN6f8Ovh5838gKX1+zULYEzGpq3xJKMY8+WmQ5THB/hKqrAn4BZOL:KZOQ7KXUoLzoKcMr+WmQ5TBJKIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10404691bc7cfeb2e5fd72fe8a2659f5_JaffaCakes118

Files

10404691bc7cfeb2e5fd72fe8a2659f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ