617c6cd3b6486e32c94b7ed92ba0af31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

617c6cd3b6486e32c94b7ed92ba0af31_JaffaCakes118
Size

715KB
MD5

617c6cd3b6486e32c94b7ed92ba0af31
SHA1

3df05dbb88a2d78f3dd3642f56464d0242805473
SHA256

41a2898d9cd9dfabbcf177fcd634da4efbb4d59b8744d73a352ac13a97f35881
SHA512

6db86fba68078ed83adf3f9565e3951601c5d3a3da8d6c9c048e8ef325891928aa1811e8250caedb4af9a7a05ff1d45efed5f871f1f43920e4921d9f8f71be6e
SSDEEP

12288:IVm69clWBe/HXKtn/V10iNgHlrTrbjX4pwI3eMTmu:IVNeBHX0zYtLLvM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
617c6cd3b6486e32c94b7ed92ba0af31_JaffaCakes118

Files

617c6cd3b6486e32c94b7ed92ba0af31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ