2855270e6caa416a634f7a9745943e1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2855270e6caa416a634f7a9745943e1b_JaffaCakes118
Size

57KB
MD5

2855270e6caa416a634f7a9745943e1b
SHA1

bef300000a44eb2ddc30e329624fa9f4ec807726
SHA256

80ca604b8a8349a0eb448abb47fc5645d43e77140406f9af8057292f43d0fc26
SHA512

fb0486ece13f2604ab8fb479c67b47de0d5d50b5a1c4a73393b1f66fae05af0da74976476fabe37dc1cceabde919b6da30f549a452e43eff2f7b4558d6468401
SSDEEP

768:6iQxqcQ4E+Yd1lC5qNQ8wP11YJ1UY2j6Yu494AxzxPJBVEGYzW5j4Btsw1V+8XfG:dQxqcQ905qNQv1EC9j0etVEGgWF8X0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2855270e6caa416a634f7a9745943e1b_JaffaCakes118

Files

2855270e6caa416a634f7a9745943e1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ