21086d422470e128edef52d578b9f112_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21086d422470e128edef52d578b9f112_JaffaCakes118
Size

2.5MB
MD5

21086d422470e128edef52d578b9f112
SHA1

801a2230a062abe7ba96c2835a628ee49967f65e
SHA256

ae7e519ff6d6333184bbdd054ea0e46960c4d4501d7762fd9187f44cdd08d876
SHA512

278b3287944a2ff0ece7446e5a12bc2b0f2f04c252c3f8735a98332219987e1f29b2a2bbde2fad8b35d5e76640658a9c1879cf1d347c13dc7a6468f187ed10b1
SSDEEP

49152:56dOSInKIjAb4oPgFcuo5BhRleLfYfxQQefdKVPkGALRADRRnkMHxrmRcQE3ls56:Md3IKsGgdm94+ef82dAjnkMHthps/pC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21086d422470e128edef52d578b9f112_JaffaCakes118

Files

21086d422470e128edef52d578b9f112_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ