31dea05025572a9cb1af5b4382a4dae0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31dea05025572a9cb1af5b4382a4dae0_JaffaCakes118
Size

1.2MB
MD5

31dea05025572a9cb1af5b4382a4dae0
SHA1

6190c3db215a8dd69c07dd5c92927c6afd727bd8
SHA256

9636aebe035a285c89369e450a0ba332786e14b691cd00ec983998ea26d90ae8
SHA512

1c5cfc3137da7ebc177dab2dee2d7e21b3198e0cfeec37d4e01387081db8699501f7ae4ac1d4b7e20ca9670e4e8f86b8ff0999687585bc5390756cb200bb96d8
SSDEEP

24576:cPBbH3xRW/Ase4d7/h+Q5NXh5a8lwiX0LT6T7s1E:WBbaRdj0Q5NXS8vAT6Td

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31dea05025572a9cb1af5b4382a4dae0_JaffaCakes118

Files

31dea05025572a9cb1af5b4382a4dae0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ