21cb8794232a2028fcd39073fd2162c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21cb8794232a2028fcd39073fd2162c3_JaffaCakes118
Size

703KB
MD5

21cb8794232a2028fcd39073fd2162c3
SHA1

021001ede6c37ae5c880cdf1130e2b3c1ea0a40e
SHA256

6b2f994789ebe1b96ec1122cceb60df76d870669ff074f652ce2bea7e5e98818
SHA512

714f1a5926ee3f8a778dc4e20f7508bf4832c6cdcbb056c04b822d9032985e7a9f8d076f99b06ee6bdcd0a8c1cd9c2a12bce722cad3f7beb921b9c0ccf3d9b86
SSDEEP

12288:kc//////ye1kAANUovj8iUdYxVX5/Q9yKnOi4FwgVDim8LbmV7011CwuD:kc//////ye1QNz78XGVpYr4FliZ/ma18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21cb8794232a2028fcd39073fd2162c3_JaffaCakes118

Files

21cb8794232a2028fcd39073fd2162c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ