492e8a143a1a6d9b9e52b52458fbb073_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

492e8a143a1a6d9b9e52b52458fbb073_JaffaCakes118
Size

376KB
MD5

492e8a143a1a6d9b9e52b52458fbb073
SHA1

f8e12a6a9e1c066743a3de5fa7ebbcb00591626d
SHA256

0e1205a6c480c422dfd99944deb1780c91a719596071b09edc3837fe97cd4efc
SHA512

dbe12a3ce4e75719e813eed4e7c54cb7473e7032f91201d80fdd24f0b05f39360f9fd1ef722efddf462e7298fff7a4e2f8c55ed5727cccd93ade72fbfc5735e1
SSDEEP

6144:zIHYsZbS31zXqSNQgeiOKnDYVH0pwpMWEmpRBJ1NuUBY+f7zAF11whggaoHofphk:zIVZel6SOgeiOKEVH0ppWfBJ7XBczmRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
492e8a143a1a6d9b9e52b52458fbb073_JaffaCakes118

Files

492e8a143a1a6d9b9e52b52458fbb073_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ