430963857696a5e281d93a98d148dd4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

430963857696a5e281d93a98d148dd4c_JaffaCakes118
Size

1.1MB
MD5

430963857696a5e281d93a98d148dd4c
SHA1

e1a2de2e5f490a3866b799f33080ac59116b4093
SHA256

becaf979c8a0eecb3380e8fe0ede374c701873e189a98cd664e55a5635026907
SHA512

e0b7fbc480a6a1412abf4e2b50c83b27cca74403bc943d9c99a5f4442094031b08edc209ff212008f62df890bb072922b11974b2324d8c7bb804b5e5cfe0d7f9
SSDEEP

12288:vbyBF404vVLN58GDnUZgAtUXYq8+gprZxsPHy9DV3xBLvVhMSkXkGAnob2LuVvGm:m3yh5NUxsYqUrZ3zvDEkGAnoD4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430963857696a5e281d93a98d148dd4c_JaffaCakes118

Files

430963857696a5e281d93a98d148dd4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 826KB - Virtual size: 826KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ