1768dc8099627a92b80d7f6be909b342_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1768dc8099627a92b80d7f6be909b342_JaffaCakes118
Size

200KB
MD5

1768dc8099627a92b80d7f6be909b342
SHA1

6cb84795f7bbbc7ad8344de11e04109ba04c5c6c
SHA256

896e150d18a326dd54925c32808ad791f6baeeb40e0ad645bfe1120cb9914686
SHA512

690fa989b5721bd4bfd2d70eee57d1139db8907a8f82640949e60f22a01d5e0cdac6e99b7fd25bd1398262c75e38aa1daf1ee5df7c2272d3249818781a13fe16
SSDEEP

3072:sbj/rqCO5WLE5S34dRlHXA8FbywP62Vkz05GycAf0+qdUn9XwXSI/o41EXwS19:AT5OeodRlHXA8j62U05G5O9Xwlo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1768dc8099627a92b80d7f6be909b342_JaffaCakes118

Files

1768dc8099627a92b80d7f6be909b342_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ