257780ec5a5b428affa44e790d6ff963_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

257780ec5a5b428affa44e790d6ff963_JaffaCakes118
Size

52KB
MD5

257780ec5a5b428affa44e790d6ff963
SHA1

3a8ac2a1c28861ccb591885d41108a8154f5cb6e
SHA256

7a6742af58006ea4abca9f13bd2d84548420656510a2dbbe9ffa5b2b665b94d6
SHA512

b8e83c9b9ba2a8bcf3dd21e5cbaf46ec25d50c24d1b457be314a552a19d5ee85257d1928d82c6523122f27bfde13d9cebaa808c64409f267ce1f9aa90489dc11
SSDEEP

768:vBEY1MQM55cYXmr0a2Y7/IXEUD/FXNeGauuZWVL/X+E9CrOds07Jt48V:567a2Y7/chhNVuZWVN9CrAN7Jtr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257780ec5a5b428affa44e790d6ff963_JaffaCakes118

Files

257780ec5a5b428affa44e790d6ff963_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 921B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ