31dbdf0693da4c4c2bfcfe199a20d24e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31dbdf0693da4c4c2bfcfe199a20d24e_JaffaCakes118
Size

1.0MB
MD5

31dbdf0693da4c4c2bfcfe199a20d24e
SHA1

da47a53d75e8c3dbf8b01acbe19ac06bc0cd9023
SHA256

6b1beb32ad8a67ef90001a3e0d251d8197ae6ad9cd8e5da0577097ec285104e5
SHA512

3f84dbc067bf1858de8f27916a5a0bfcefc1f546e3825a90f924ef5eeefcc51b3a1e425510a52d42ce136317aa3b0c32ca0b649e098e9cee41595399f61dc9b1
SSDEEP

12288:g0r6WbgSyyc9cQKjwe85+Tjf9WqcoQ+rpv0CxiNBL4eek28c/IkhLohUP+NS4d7t:vp0r9cojmHxiHck2JJhTvTTg4yOVAlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31dbdf0693da4c4c2bfcfe199a20d24e_JaffaCakes118

Files

31dbdf0693da4c4c2bfcfe199a20d24e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ