155a9ed63160c38b49a1375b154f1d2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

155a9ed63160c38b49a1375b154f1d2a_JaffaCakes118
Size

752KB
MD5

155a9ed63160c38b49a1375b154f1d2a
SHA1

76be475680ffff9d71fbcc228a4a9985748e9420
SHA256

d0dd09e0740a98c691d729462c55392dee4a80cb85a69dd15e21305833084a3b
SHA512

146c7a078039066e8238ebd75147db7ba48b515f5daeb9a779d241efc1c7d6574cbd4095a5636a8f94f2c0f29b670fc5a950c4add159a2d700987cff9086ff77
SSDEEP

12288:jpXzkZRj3HhXjYDCPNKKbdGsVHjx31DpqXRiftREuMqb/kI:jpjkfjxMDCPNF4KpqXkftREuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155a9ed63160c38b49a1375b154f1d2a_JaffaCakes118

Files

155a9ed63160c38b49a1375b154f1d2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ