31873ee00b6a6301df8a6f480d21cd53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31873ee00b6a6301df8a6f480d21cd53_JaffaCakes118
Size

96KB
MD5

31873ee00b6a6301df8a6f480d21cd53
SHA1

8c4a88ca1784582d3935b93635d5866c81f97d1b
SHA256

1d30992642aa987ff85a85d0e17661f8eca1a2f0c52bd4502950421d9383cd97
SHA512

0d67ac5f41afc6b2ffdaae856b5d7fd9a411b1b63637ff08d0ebdfcf287150bf68f59b016adc33df2ecbbe6bcb8f22380a9069c5a0420c8e038e3734958ecf47
SSDEEP

1536:COeq6onsKjBQ7h02ki23Wnhpwld0NCL0KQCe95JBeBzBaXEBGmfY0ei24zeTQhN2:C3onNQm3mnW4D5V93INsXEYmfYT4zeT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31873ee00b6a6301df8a6f480d21cd53_JaffaCakes118

Files

31873ee00b6a6301df8a6f480d21cd53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 713KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 17.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ