61e0ba74e9f9b1db7a70e8b53983e81d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61e0ba74e9f9b1db7a70e8b53983e81d_JaffaCakes118
Size

52KB
MD5

61e0ba74e9f9b1db7a70e8b53983e81d
SHA1

978c44bc283944978869d9108e9c7bbbb6a7be97
SHA256

c85cdb729d6c299f174e908148828cc891d3d7d97e974a97c5e26f805e810598
SHA512

e37a7731fc22bf8543f16d36e9a881ed10be7297befd30901465db78261ee41a6653f83e999cad3c9277224428cca29e42169df231389704bc9bd47b1608efcb
SSDEEP

1536:3TtLA1RmJfFk29dWn3R/jZ14JXosJ3NM:DtLA7aF2nh/N14JXosrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61e0ba74e9f9b1db7a70e8b53983e81d_JaffaCakes118

Files

61e0ba74e9f9b1db7a70e8b53983e81d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ