2617ea1427d3a4a548e0c91192f39143_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2617ea1427d3a4a548e0c91192f39143_JaffaCakes118
Size

825KB
MD5

2617ea1427d3a4a548e0c91192f39143
SHA1

20326623f5e7ce95a9401b665436d792db603b8c
SHA256

965e1cc116b7180ddf4b32cf46a92b6d1c128ad8b86058c9b7d56878e983daaf
SHA512

3e4b527f4e389a8fa42edfeb167abc776f8f6c47fd314143a4c686d6fd9c3de268d4e992d3a8d317ce2e60021498a7b0f97c8bd502681ab2111eb96663d5c662
SSDEEP

12288:IY0B0+qQGIZHQ/YwEPPewFGy0ifJ7yUG54WhOgT/cdQ1ylrF:IYq0SGI9Q+vGRiR7yH54H4UiyJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2617ea1427d3a4a548e0c91192f39143_JaffaCakes118

Files

2617ea1427d3a4a548e0c91192f39143_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE