153c168d3aa1f98d99bd0a33bd9d3cca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

153c168d3aa1f98d99bd0a33bd9d3cca_JaffaCakes118
Size

691KB
MD5

153c168d3aa1f98d99bd0a33bd9d3cca
SHA1

8ee918d7e61b7e33126ec26e9db4356e7f740773
SHA256

bf2729fd2f038e10c5362aa55a075da8e20d1c04e65ece5f84045c1f0fcf9c02
SHA512

838c518b49bfd74560a009b4387db2cf4e5fd0c2b9df90b5311538b280db2a8f2ff2550f0dc34a05b00d0ead4722f312ab38c2718829d33b2afbac9b1ea2a725
SSDEEP

12288:kwyNojKThhXnkfKq7YqiRJzOdqfEdT8U2pITH3kgEF3Z4mxxWRCIZuiS35ZvF:kwyNo2ThlnkSe4ZOzd4RCbkdQmXYCedO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153c168d3aa1f98d99bd0a33bd9d3cca_JaffaCakes118

Files

153c168d3aa1f98d99bd0a33bd9d3cca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 353KB - Virtual size: 776KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 319KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ