476a1aa6e862818bf854a64e024a1580_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

476a1aa6e862818bf854a64e024a1580_JaffaCakes118
Size

325KB
MD5

476a1aa6e862818bf854a64e024a1580
SHA1

3dc0c40269a5d636e17385aee86d1f307075b7f6
SHA256

00e0007524d6330d65e2662043d7b04b8a8007b0c2165b38e3da38f8bb8d88d8
SHA512

daea8531140db3c2a5420e25fd791f1ef14fdf4f255f6be32caa0fc67e7780028d67cc6c2ebda765805fa3da6dc510d4e0fce134add58317a6b7f2c291f52142
SSDEEP

6144:Wdf3WkycDkC/sUbj65FY6xqM7bTY04csNXjQcdpPrcYtzQI:WddrDb/Jb2c6xqM7XY0fqXjQipPrc2QI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
476a1aa6e862818bf854a64e024a1580_JaffaCakes118

Files

476a1aa6e862818bf854a64e024a1580_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.irncjim
Size: 309KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.juesoyk
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vzlonlh
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE