31b073214a9c37f8458f1e0a88bea4a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b073214a9c37f8458f1e0a88bea4a4_JaffaCakes118
Size

1008KB
MD5

31b073214a9c37f8458f1e0a88bea4a4
SHA1

ee761504626e8ff6be36e6c7f3a4e9f8db3fc8e5
SHA256

445069e7dad89c645b92aed674ac4dff12409bfde1707ca3f9c2f58abb0f3e4c
SHA512

8ed2dc0067dc87b3330239c42b55e02447db926813c70b37d76f1d4dd8ec8b53dd92007f60c0b922b69fe5aba2888dcee7184bfd4c2eb2cc2559b61a4c93efa5
SSDEEP

24576:nEQjpeBVwfQ7iBFMA+RqIQ1TXrWJMMXnXwgeFGcsJM:nPIvtR3QT7GM4XwgdVJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b073214a9c37f8458f1e0a88bea4a4_JaffaCakes118

Files

31b073214a9c37f8458f1e0a88bea4a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ