61a08db11ed3566fb4fd38e348428d17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61a08db11ed3566fb4fd38e348428d17_JaffaCakes118
Size

147KB
MD5

61a08db11ed3566fb4fd38e348428d17
SHA1

4a36770bd883345d584c44e99afb08e33a4522c2
SHA256

04e6ef347d1a91c6aeb112107a72c0b07317ae339a0def383f3726ba049599a6
SHA512

3051321ed20d4cfab7f4b6e04d8632354c5df2bc18a337a649ce78cba22ab824018fe63df365f1846d1a61b19b90c883b0e065d929057c67cf46b24cedebec2e
SSDEEP

3072:tkgqCobYx/pNhJ+1RlqJEqyWQBAsENQSpXcObri0siOx:agqLbY3o1mkQpXcedNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61a08db11ed3566fb4fd38e348428d17_JaffaCakes118

Files

61a08db11ed3566fb4fd38e348428d17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ