616be5dd251e04d0d4d51be7c0491cc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616be5dd251e04d0d4d51be7c0491cc9_JaffaCakes118
Size

95KB
MD5

616be5dd251e04d0d4d51be7c0491cc9
SHA1

626b67f64140de9a8d33b5d2e547d8fedd50fcf8
SHA256

7cb3b739d8ec3ddbf1ff92f4ac75dca36818c56ae8c29d89dc5a2763a231ba6a
SHA512

4b7fc80a2e419f4386e7d93c01856dbc84a1dbb93588b9f13931889bbb461b4f2918b3f5d5836c9afe673e604f3bef1e3ef5a5b6fbad4125de4fcd889cca9ba6
SSDEEP

1536:WZfQAm/nNfG5EoQ1rAbHwIUul9+hbdqQWYAxpNV249wUn5nq:6I1/gIAgC+hbBWYEDV2Aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616be5dd251e04d0d4d51be7c0491cc9_JaffaCakes118

Files

616be5dd251e04d0d4d51be7c0491cc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

YXF
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE