23452d0e9691db984b969415fd7e10ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23452d0e9691db984b969415fd7e10ed_JaffaCakes118
Size

2.9MB
MD5

23452d0e9691db984b969415fd7e10ed
SHA1

14548bd3a35b43e4ac2ea8767a061ca9b922adb2
SHA256

648fd2647b944ed1f53ee0f3fa1abdf9e961b54d2fec8eabb492b3d2333dd2f1
SHA512

e9970c1aa3e4c6fe5a55f64eb64574e4dad0643508125af0498b499f33a0f9b5f186e7f64216f996971692d0b3be3fd9ed217ccec1a0777826c61b404b5ec514
SSDEEP

49152:FQEwpxuGEpGsk+ShD5waOkMgB6X1H7CqD75ureuv9V6LtErMq2pcsDdIDVZJ0c78:FfuuxpGsOGXkBBCk+75ud6LarMq2pcsz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23452d0e9691db984b969415fd7e10ed_JaffaCakes118

Files

23452d0e9691db984b969415fd7e10ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE