283784698c04738be349d2a61435872c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

283784698c04738be349d2a61435872c_JaffaCakes118
Size

984KB
MD5

283784698c04738be349d2a61435872c
SHA1

d0e5936355e0e094028ba608755e4363355fc75d
SHA256

3fa6b41fd4012872a6d7d77f08c737fabf9472d1082a03c00fdf0d065b466d45
SHA512

5e7a216cc4fb6b0075f98b89582729dbe9c0a482a6ec307bbca9aab2ff300da13238d8b2abad67cd5e44e1f5b09d42d3875b8d40d9170015b3cc609f5fae15ef
SSDEEP

12288:xjWAC4CXtR3PSGLxe0DNtvVNqAC09CBN/i1NymdYsb+JNFXH4VLjDB3kknD2AxDt:xCxtR3PFx7DtOVi3jb+N4FB3kKxg6Rp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283784698c04738be349d2a61435872c_JaffaCakes118

Files

283784698c04738be349d2a61435872c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 957KB - Virtual size: 960KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 921B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ