21c6d7a79bc44654e645d370bf19e02c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21c6d7a79bc44654e645d370bf19e02c_JaffaCakes118
Size

131KB
MD5

21c6d7a79bc44654e645d370bf19e02c
SHA1

ad26b65191879208f197768b84a15189a534347a
SHA256

68ae876ac8023d12f9d0640bb17edd484debf5348a0db03bec5466d59c5205c0
SHA512

75e776dc8d28b46188c32f56104e19e9e78ca74754aa09e0ac6745d81649bf631919502d80103bdec02b73100fc8d228863f479a14fa39ae4030d49af642d284
SSDEEP

3072:SaR6EsiAjZuzzBjk5u25GKNnZyhjU+gMganO2sNS:/6E1Ymzq5GKNoo+gL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21c6d7a79bc44654e645d370bf19e02c_JaffaCakes118

Files

21c6d7a79bc44654e645d370bf19e02c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE