416d032abb19606358a3a3531ec4686f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

416d032abb19606358a3a3531ec4686f_JaffaCakes118
Size

130KB
MD5

416d032abb19606358a3a3531ec4686f
SHA1

37f4e323111e0741a623017caadcf75b8a091849
SHA256

9e849757bbf582bf505f5d1b7bba6c4a7fb22fe47808920b65ef9b6a6f707d99
SHA512

e260acd6dfcd74686aa93ba3eeb5166a634c04a963855728cbfa75c145849343fbc7e8bac13e51ccbea9c6ef8f274bb03975f057dfa8240d08bcdbcff2159389
SSDEEP

3072:kcjjuSrGn/x4+e7gyUvOvR0BZNnvRF0oHoGJW+kXfdPC7ho0rSzJ6V30CD+:kcjjuSrGn/x4+e7PUvOvR0BZNnv30oH4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416d032abb19606358a3a3531ec4686f_JaffaCakes118

Files

416d032abb19606358a3a3531ec4686f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ