428e6805f6d58174b5814ec817ee6555_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

428e6805f6d58174b5814ec817ee6555_JaffaCakes118
Size

392KB
MD5

428e6805f6d58174b5814ec817ee6555
SHA1

daa64953538ec00033cd025d81a294fea0c6173d
SHA256

6df13924ff0d023bd5d4cb93ddcd5f769fda66fe2e1bb98f3f23b704b9ec5af1
SHA512

03e8a6d163a142b7d8686bf5a154d94b8f5c3a5b6adf6cec01962e1e51d058673dee84b9ecf667a0b3ca3262f273ca8929197394a391f8371863af4124e7aa19
SSDEEP

12288:uuivXMWxiTbDOxmjiRGGKTdeThSd4kXJ+:gfBiTpjixyF4E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
428e6805f6d58174b5814ec817ee6555_JaffaCakes118

Files

428e6805f6d58174b5814ec817ee6555_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ