1a6e3cdba0a70520869bdf8490a7b49c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a6e3cdba0a70520869bdf8490a7b49c_JaffaCakes118
Size

729KB
MD5

1a6e3cdba0a70520869bdf8490a7b49c
SHA1

47981a943886cad02bf14b03b43ad6d504fe56c2
SHA256

d2f8a358b7942ccc0d834aa088467f29c9799d28972262d7ea30d2e8cb42d96d
SHA512

fed28860d292c92f23714ecedfee3d7de5cf4f49c2596b2216049af1a4420514138cb4b811c69c49033a1d5c80bce2d6b94a9172e2cd71f042c82e9098d6449e
SSDEEP

12288:sE0kf+rtOb1alWLzf3/H0ay9k/eCZPLWCPd6LSncryITAa1BcoKASaJC4/70GBGj:N0k4y/Lr3Ma5NZP6CPd+SY9TAa4jAHTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a6e3cdba0a70520869bdf8490a7b49c_JaffaCakes118

Files

1a6e3cdba0a70520869bdf8490a7b49c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 666KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE