31f05ac627331013b1b1a600afae9bf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31f05ac627331013b1b1a600afae9bf5_JaffaCakes118
Size

417KB
MD5

31f05ac627331013b1b1a600afae9bf5
SHA1

001580994ed45b770f1ef65abc55be558554b186
SHA256

3aaebe80f0e0e5698d41dae7f4df6f60fe2851fde8ac046148c52ec7766ef96f
SHA512

d1cb9e19c0bc325a096abc2f19135f7aa022cf3be42f63b2fd5128e67c8039f7a37dc5fc10e3e0f894b18814149a201fc3a0f23678c1e172586101df87fa187d
SSDEEP

6144:694SShIjmtI69c+0CwZg/gC054RKlo/4uwYvN/nOIu9HB7PSbW1dTZRUyMdCWu45:PhIjmL9twZ2gmQmfOv9Po2MA0dQZqJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31f05ac627331013b1b1a600afae9bf5_JaffaCakes118

Files

31f05ac627331013b1b1a600afae9bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ