321df7dd3f700c86133592436dfd57b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

321df7dd3f700c86133592436dfd57b6_JaffaCakes118
Size

1.5MB
MD5

321df7dd3f700c86133592436dfd57b6
SHA1

f0756f2f175413a0d75aadfce0e76ec36c22dc27
SHA256

1f0b568ea2e8f7c9ba3e4d4120946768a4be15c6b707088c45b27dafcda76464
SHA512

ab50c248ca05259a1d0b0fde90101fe17e49579ac7a2d0571dec9c1ea3e3fb4e6d48c9ab7483ee525b7d0db40f1db64add8bedec69dea97b810519f6b308e8c3
SSDEEP

24576:9I4ZWsLUzZ9wAlG4sfIPO9cudmU8eAf3IXsViiI8yuG1H3QxxGkPbeNO+HeGVkfn:rLslG4BludV8e0IXsVM86V32paw++Hfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
321df7dd3f700c86133592436dfd57b6_JaffaCakes118

Files

321df7dd3f700c86133592436dfd57b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ