1043de17addd31c7df62231e58329a24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1043de17addd31c7df62231e58329a24_JaffaCakes118
Size

366KB
MD5

1043de17addd31c7df62231e58329a24
SHA1

81f76cff2b96bd20f39a09a8ca8a714ac3fe95d1
SHA256

4efd7bc0f5db609c87506057a44d52462e52af45bebae331983c2ac63bc2ef34
SHA512

e8ea9b54559884291fe90d4d7ac72858338da2bd21c8a71693946083fd578ee77b117ffac1e3ab2f676d9da7bd0b79832579be3b6f325c92f8552bc158ae5c8c
SSDEEP

6144:FgAzofHoVHkxB1rPrrC+XoaicGMIe4X+47rgaljtzW+y:ZofgmzPqMItH7rpjJW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1043de17addd31c7df62231e58329a24_JaffaCakes118

Files

1043de17addd31c7df62231e58329a24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ