18c17f8ca6ad25fee4aba39824969ac1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18c17f8ca6ad25fee4aba39824969ac1_JaffaCakes118
Size

851KB
MD5

18c17f8ca6ad25fee4aba39824969ac1
SHA1

65959b648555a90ce5220ea0582932167134e982
SHA256

e79ee6d3d613bfc4aca43bdc1f19e7bf26c2327dc70e045c0ea0c24d011f95b3
SHA512

6b33e1e7cea9df3abfd2b905212e11dc61d7aa16052677028c2c4b6ff55856c8c3eb1a51ed8f1a87d51e416508b47d7f074310f3d26385deed2c9919600cf35e
SSDEEP

24576:Y1zE5f2Oz4rWX1sxkL2aF+5IvDJDvQP/HTF:YS+viMd59PT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c17f8ca6ad25fee4aba39824969ac1_JaffaCakes118

Files

18c17f8ca6ad25fee4aba39824969ac1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 732KB - Virtual size: 732KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ