19dfd64002765193c04d17d915882712_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19dfd64002765193c04d17d915882712_JaffaCakes118
Size

107KB
MD5

19dfd64002765193c04d17d915882712
SHA1

ab259397b224fe8faaac31c225303eb6096119e0
SHA256

143f1b033fa16005ffc64abf418c19540df80edcff813c48763ec888dcabfbf4
SHA512

4f3b26aa974c52d33b53f4bccd73b2ed5f210c953727060b43a0f5ab3d58700f0e16862b1a04f73265fcfd8fca74e81c3c6a864e33bd7e078fe3682056e7cb1e
SSDEEP

1536:dGq6Qc1wLLCFbj/48VHgWVQCSbX74OpBlydjSNPh4UGUa7Y94hjr4Ae4EpC0EYOa:Wv1wLLyjQ8dgWVQr4dZ7YCGkkkkkkd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19dfd64002765193c04d17d915882712_JaffaCakes118

Files

19dfd64002765193c04d17d915882712_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 203KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ