292719440551d161fce5089951af2e1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292719440551d161fce5089951af2e1b_JaffaCakes118
Size

64KB
MD5

292719440551d161fce5089951af2e1b
SHA1

d9d9bfea7d13671bc9e68661bee2a3e6416ecc1e
SHA256

f97e1f52fee1d2f8b032255d24a1f30f52d2b38f204cbda6085ef9966c6bcd3d
SHA512

d24366ee0e0b27a9dfd0e11f668900dc1e970a38060da5b9ad9442d6f2219799019e564e84548c4d49665b2f003927926e62ce9ee8d4e4978d08a29e0a2a241e
SSDEEP

1536:ySI+/Jalymhy5wErrYGcGoEhUWyZJSTFJ4w1vFGtGszzzjRFm:2+MyOErEGxhoZ08w1vyGszzzjRE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292719440551d161fce5089951af2e1b_JaffaCakes118

Files

292719440551d161fce5089951af2e1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ