415fa8369548b2a6fe97c1e8fffe8dd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

415fa8369548b2a6fe97c1e8fffe8dd8_JaffaCakes118
Size

1.7MB
MD5

415fa8369548b2a6fe97c1e8fffe8dd8
SHA1

d164b1976b2ba744baf67cce523cd808f4e4aeea
SHA256

71b8124dc090a64a82c281981523e16aaadca7a99520fcdd922e3b68a83196d5
SHA512

94669eca40ae26bb6644333305ee801a2e5e8921401bc53c3f49c406f8793e51c462cca9073230d05a03b169c20163c0a2558e9482dee8175676432ee8d2db24
SSDEEP

49152:pzCsHuWAA9CBzQotYVqy24qvXDqcLN+Kr55uXYyN6oMY4px+tb:pzVJAAEQotYsyrsXDq45oXhN6lp8tb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
415fa8369548b2a6fe97c1e8fffe8dd8_JaffaCakes118

Files

415fa8369548b2a6fe97c1e8fffe8dd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ