605b0f0f4caaa7cf44d212fbce23945a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

605b0f0f4caaa7cf44d212fbce23945a_JaffaCakes118
Size

23.5MB
MD5

605b0f0f4caaa7cf44d212fbce23945a
SHA1

23f0ca816e6852ae2c987f8dcbc160eab2374868
SHA256

d135a0792a79664d1dfc4cefdaccd1072d9089a999aa10d48827d31e10ed8e59
SHA512

5847f6ee9ddacd35ecf8a9d4d0143c8fdcea5079d93b18318f5e28a13f6d1d0f64d67ee3131fdbff102c4d8accf119b1c5a6b193755f83952d17d4abd0c2b837
SSDEEP

393216:HDYpuyYMSjvf2JbGeNmjo6QSn+sKmV/CBBEEE++CmZYOo+EEEEEEEBBBBBBmmmmu:HLyYMSjvf2JbWjo6jn+sKmV/CBBEEE+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
605b0f0f4caaa7cf44d212fbce23945a_JaffaCakes118

Files

605b0f0f4caaa7cf44d212fbce23945a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 741KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22.7MB - Virtual size: 22.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ