258ea6f7308abd612608b58cf5c9bfe3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

258ea6f7308abd612608b58cf5c9bfe3_JaffaCakes118
Size

549KB
MD5

258ea6f7308abd612608b58cf5c9bfe3
SHA1

765abe7041a9f6674cda457b5db92981ed3858a4
SHA256

b50e4ba2693f9859e54247339f2b4b4cadebe44208386eebc3b410d316cd39a6
SHA512

41008423cbc7e5c7ded649b07bf17b2f835ee7e33efef20b658b63b521c2bd8984f01360f4a3548f0d9fbc99a44ea6e7b5e1aa0634aed6183b813c88b860207c
SSDEEP

6144:wJY4khSipGLEYhSSJQzNrvNbn8fID8LgVsnyr/4Zxmj8qCv5DOs9h/ajmKzu1l:l4khSisYYEpzNzV8Byr/ZCha8ozuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
258ea6f7308abd612608b58cf5c9bfe3_JaffaCakes118

Files

258ea6f7308abd612608b58cf5c9bfe3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ