612b93885423a519f95345cb4794d446_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

612b93885423a519f95345cb4794d446_JaffaCakes118
Size

88KB
MD5

612b93885423a519f95345cb4794d446
SHA1

b10623b8af64ee2e87012b2552d9a0e9c5d84411
SHA256

41fff6b8dd61b8c6a1086eeca83b87626fae6931a499a12da7f2c147510698df
SHA512

437c2d2314657577273f10b976a196296b8d0872d70a2f9c9fd41634e52fe878c0e700a458ed53932291b8da5619c8d604564ba45bee4371485b95443f595fc0
SSDEEP

1536:qOqkxxKo/k+BqtwVuDhaIV5RBDr32lkYdzgPUn8DM8g8VrxZULqJBOBOBs3:/qkxxJHP+haurjYdzuU8T9xaL+EMe3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
612b93885423a519f95345cb4794d446_JaffaCakes118

Files

612b93885423a519f95345cb4794d446_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ