422dc92cd9ef5731a593ab90395cbe05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422dc92cd9ef5731a593ab90395cbe05_JaffaCakes118
Size

192KB
MD5

422dc92cd9ef5731a593ab90395cbe05
SHA1

8d8c2f4b41c3eec2e9c070d3eb491717780be977
SHA256

c94479cf385a0adf17d4d0a272d2b747e8030f2a30985f947121843f2c4ed2ff
SHA512

0bc99574aa44d3d6a18b8abce0f90ad747157100c53c8e0128d9207b7cabf53a71533f5934c21c25cacca7d7dd968c170a7fff3a84972b4be0c6d3a00101f4f9
SSDEEP

3072:G+BvuwZAOoXNw6p6ZdIq23JiGvomzFcBs8LPvupibCrd27NwCVVGTWRQvV46oVTR:c3JiGwQmsCXxmivhA4p/5oC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422dc92cd9ef5731a593ab90395cbe05_JaffaCakes118

Files

422dc92cd9ef5731a593ab90395cbe05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 433B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 25B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ