264500abb981c55a00a390b1df649f58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264500abb981c55a00a390b1df649f58_JaffaCakes118
Size

71KB
MD5

264500abb981c55a00a390b1df649f58
SHA1

f5874a34463ec75766b0212c1de3b06eef9c1d48
SHA256

355d1def16d88030ff9a2886273c4df04066d11656a440e19df832c08d74d71c
SHA512

8ace9b542fc9d721de56051bf1db7909e570403b477bab6921175ef6cf97869b9eed70fab464ad02887c6e235e22d5afc976deb939af828351109e38cedc9e16
SSDEEP

1536:WHsKacJr4XzZvURthB1v3o04EGI6NxM4i+hpIcIF5QJgHY:BchqZAh3PhOI6HMZgIcwQ64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264500abb981c55a00a390b1df649f58_JaffaCakes118

Files

264500abb981c55a00a390b1df649f58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ