37a6c1504e8501e7a0288748e6ca1ed8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a6c1504e8501e7a0288748e6ca1ed8_JaffaCakes118
Size

744KB
MD5

37a6c1504e8501e7a0288748e6ca1ed8
SHA1

711b81d8cb1454bbca28bad5367a5ae2fa3aa8ce
SHA256

e56ed76491c064afa18e7d58607db2d08409c0d8c111764420cbc7e4c74aa5f3
SHA512

91c7ccd24c01a706f61b4ba7a9b05a8e790e35b42b0f9056768c94e1e368b5b535cdf4b54c912b772a336fc5f2de65b8529ace8983abca089ecf012c3c54d7a6
SSDEEP

12288:ORn8S++U4u/n/80dW5A0zyW6JwQ5oAlK+GbxvZ/Ik9kQQ52LYRg08yPwrRmG:68MU4ufxdW5A2sJr/khxvZIk963Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a6c1504e8501e7a0288748e6ca1ed8_JaffaCakes118

Files

37a6c1504e8501e7a0288748e6ca1ed8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ