1a58b97f09505a6969b10e9dc030c970_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a58b97f09505a6969b10e9dc030c970_JaffaCakes118
Size

195KB
MD5

1a58b97f09505a6969b10e9dc030c970
SHA1

538ad3d84edc969f59b1e4a132754117703c4007
SHA256

8d3d888bcd2ed4fd3bc31d23f7058dbdedf4a672a9d6d0f133bc00ddf54bfc5c
SHA512

08af2fa97ae7de4983cc7b2d8d7c403274c6b8e39703d944301e99332bf3b8d9b0f09f9bc6fa3be458a0a462234856f65a6b1e2022c40bb6da27553f0dafeb27
SSDEEP

3072:GBug/VlbHkoEyt5dyi2O/BHBS8C8KoXqjNpaWgWwgurApcR/I743m6WetCypSh:gtx9Eyvdp/rSYgLwg6ApcaU3bWetCwi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a58b97f09505a6969b10e9dc030c970_JaffaCakes118

Files

1a58b97f09505a6969b10e9dc030c970_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ