21c186e79d73ad4b4feb9c37afd36322_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21c186e79d73ad4b4feb9c37afd36322_JaffaCakes118
Size

7.7MB
MD5

21c186e79d73ad4b4feb9c37afd36322
SHA1

8f2f6ac873699d25c1f59f570bca3b8948730244
SHA256

aa543018f375df08b9eb06d8f689bd2584d98ae522db6d86b90517772142ef55
SHA512

a821a85748316706e05e87e8648487d4e6b9e51c38c91b96c08a2fc539451e2a0a9b8dc9d6ea5b9ba1fe2395ce223cdb59fac999f7e61621107d9cf874a56499
SSDEEP

98304:hDDpT/bOIJtLnehmjly1csBHm16P2tBnrioS4DHsZSPaWK1DEoVmgx+HoP1Fprcd:hfr95czHm16P2jmSPaWKSG+H0Wd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21c186e79d73ad4b4feb9c37afd36322_JaffaCakes118

Files

21c186e79d73ad4b4feb9c37afd36322_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 522B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ