61907763dceb2d230a2548520e7dbf8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61907763dceb2d230a2548520e7dbf8c_JaffaCakes118
Size

697KB
MD5

61907763dceb2d230a2548520e7dbf8c
SHA1

d31f6a29d399672fed9ce40534f57a30c9c96bc7
SHA256

d1a3c29da3d4b0685a19b9d9c90dc59c379a3c47161ec8b874f3bf6f52168ec6
SHA512

4a3fc8a5aa4c15e48d834aaebf10f388e357648bf4bef72b91aec64f4f5f0b96e801f07b361e26aaff3a34bae1f09051ee3a41e1a86540194a19c6f5872692cd
SSDEEP

12288:9FK5mhi9UYzJK41VMTvmusZhe/Q+ZhnfP7sBcdYMr7/TKsbFe4eTi:KsIzJ9wCusXxmX7sByfr7rfBeT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61907763dceb2d230a2548520e7dbf8c_JaffaCakes118

Files

61907763dceb2d230a2548520e7dbf8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

XXX1
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

XXX2
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XXX3
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XXXX1
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XX4
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XXXX2
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XXXX3
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XXX5
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XXXX6
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XXXR
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE