14b980538b30455ea8e19a0075911b58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b980538b30455ea8e19a0075911b58_JaffaCakes118
Size

518KB
MD5

14b980538b30455ea8e19a0075911b58
SHA1

1e43a7f2a6b1a67d64651002525c22fed21802d0
SHA256

c1e239431e351ea75f4794d641bd7250ebe4beb33fbc177c61f7d7beb8feda78
SHA512

01058d2f89f67606e8efdfca6b9d6f3471b3ea661af04802ad2f688153ab123153894c9c53b4d7e2343c635aa26f941f7e304e754dc2e6871ab53e5c4dd183d3
SSDEEP

12288:pCoqWqVdyQffl9p6Yy1bic2pHu9DjlSjPTGAg0xMOljk:pX+nfp6FL4IDjlyGABxMOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b980538b30455ea8e19a0075911b58_JaffaCakes118

Files

14b980538b30455ea8e19a0075911b58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ