270948f32f8f00955605636bef67c5fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

270948f32f8f00955605636bef67c5fb_JaffaCakes118
Size

405KB
MD5

270948f32f8f00955605636bef67c5fb
SHA1

c97f44e84eee601918c907d6b1e8787d4e740735
SHA256

b4c1bbc691b3a002d7a7130ef26efc28b5a4cd6fd5b8310aa80542ddd213f427
SHA512

c22f52cf145717633f347a75b2c69ea39388ccdaad8fce2d0132c104bbc658863e0393948659b4d289c9f6e026504f032bc01752242081478052e53ffb3a4774
SSDEEP

6144:RpAgsvhJshd99EmPEPnPWAPWu5KTx6fm6mQQD9ukIZ4vFB0cjdF2xi:RK1JsVKFm9skIZ4v3dG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270948f32f8f00955605636bef67c5fb_JaffaCakes118

Files

270948f32f8f00955605636bef67c5fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ