2782983ef1d85f8d2647c88e853de563_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2782983ef1d85f8d2647c88e853de563_JaffaCakes118
Size

241KB
MD5

2782983ef1d85f8d2647c88e853de563
SHA1

4a3e74233bdf95e8ba55ececab4a69bafc1eedf1
SHA256

118b7f4e9bdb76a415f25542d09d1b1082351653e1c57a4bf426ca54dabca9f9
SHA512

f1ddb192e6a33b40609bbcc6c0cde5b2d9c5893456619054c0e21226ae9907e3d9920bce51c50be746311750bf24b7b190bc619786ef99c1e2aa10d9d96859e9
SSDEEP

6144:b1eC5Hsof1U3tYxHevG4DQFu/U3buRKlemZ9DnGAeYQnZIYzpPjeq:cCNsC1U3tYI+4DQFu/U3buRKlemZ9Dn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2782983ef1d85f8d2647c88e853de563_JaffaCakes118

Files

2782983ef1d85f8d2647c88e853de563_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ