21e8c59adbcb50fab12e2e905d46fc6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21e8c59adbcb50fab12e2e905d46fc6c_JaffaCakes118
Size

1014KB
MD5

21e8c59adbcb50fab12e2e905d46fc6c
SHA1

25d0b107c1278da38021ae469ebac70e7e3e9601
SHA256

cc278bcd2fc7ac4a51a928f459d140711c90cddaf5e88760942ad10dfac37bd6
SHA512

24b815bcd24b2fdfe053a21895cb917176b0d9833a0a0110bfb0d87e0420952006787a5764569e32fa764f706df8f993b9f38209795e87c85196bb78c6251d58
SSDEEP

24576:FEWTK3xPq2fSAh0hnKHcJiSu1wIxANF4Ds6VCkXH/u/qEZYKoY5I:bTKBC2fSAh0dJJDIxAN+DsYCkiquYC5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21e8c59adbcb50fab12e2e905d46fc6c_JaffaCakes118

Files

21e8c59adbcb50fab12e2e905d46fc6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 788KB - Virtual size: 787KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ