15049406fbdf80b667785b0145750c7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15049406fbdf80b667785b0145750c7c_JaffaCakes118
Size

589KB
MD5

15049406fbdf80b667785b0145750c7c
SHA1

8af0d90048b499fdb32c1956e4e4d41a6ccf28d3
SHA256

6af50bf0767b73b08f7a826c4a54be7a3a01599f6727c9f7b45858d356f1ceee
SHA512

492fc636e9265748b04f18b829a30c2b94689dc06b3d26c00a18cc6f5cf995f3a7d00c9cac4f664b2381e77f72d5162133d951d20a5a4bc049995b829879b53e
SSDEEP

12288:VhIjmL9twZ2gmQmfOv9Po2MA0dQZqxyLWeyG+eVvfm5X:Vh+6pgmQmYSrz4WveyGxVvfm5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15049406fbdf80b667785b0145750c7c_JaffaCakes118

Files

15049406fbdf80b667785b0145750c7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ