1ae870387d6ec6faf66bae50d9b2c861_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ae870387d6ec6faf66bae50d9b2c861_JaffaCakes118
Size

704KB
MD5

1ae870387d6ec6faf66bae50d9b2c861
SHA1

2068b78e1a6df350476b54e8ab113c8ee11c0d8e
SHA256

429eee5ccd993bab849178de6851aa3e01423f1d1cde103065a09a4250579c37
SHA512

40188369b27507238cb28e003b2e6c4fe4c0a950d075b411a45b872d05262f1591881d5990561447e481a8f1788d6d60deb75f33df20c30cef55cc57f1c49961
SSDEEP

12288:3rUDOJhL1W9wqlWnk6IQ2pSvo5UEai9RJHHcXhpd3hN41+Gn5hu/tUBu:31JV1leWgpSzE7nJncXhbv419u/tUB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ae870387d6ec6faf66bae50d9b2c861_JaffaCakes118

Files

1ae870387d6ec6faf66bae50d9b2c861_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 80KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Netease
Size: 552KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE