32f5b51c603fe9b2c7f3fd1e711664f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32f5b51c603fe9b2c7f3fd1e711664f9_JaffaCakes118
Size

669KB
MD5

32f5b51c603fe9b2c7f3fd1e711664f9
SHA1

a6bf435d9f46d159035141df283420dc44f9b80e
SHA256

a3471ed13bd4ba9d0239c9874d1817da0969740ab5c52046047f7d44e0b64d01
SHA512

1cf0f443a4a76e71456d2019514bbf76d5da45c782161aa8931ee13eb3e727f4c225c2eeaa6d05c5bfb380a2758a164a28ad6489dcd99c0c5c7425576bae7a08
SSDEEP

12288:tkjBq/u3Yt7eyw+D/hKzckNTm2HOWP2OTL5nvd:6FYu3Yeywq/ITF9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32f5b51c603fe9b2c7f3fd1e711664f9_JaffaCakes118

Files

32f5b51c603fe9b2c7f3fd1e711664f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 305B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ