62072d34172bd3484ff9fbefbe49c6d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62072d34172bd3484ff9fbefbe49c6d6_JaffaCakes118
Size

583KB
MD5

62072d34172bd3484ff9fbefbe49c6d6
SHA1

2c9c6d015e7620d7af43f6e5812d4712121eb11a
SHA256

c95e6a8f59c961f03471e335a9fd185537e3fbf3febe0de76b16fd2f8cf36bcd
SHA512

1f96a92decb24dd32e5e2ba13d4984c9d71ffad849b531c1d49e71863d2ca62e9b0631dd1715bead89863f34719ed0a19f7fb4d73be7fe58df71629ff22ce77f
SSDEEP

12288:KL0+8qOgwM1oAeta9uIM2p7KeL5Q30OQaZ4:KgtqAMmAetjKlo0OQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62072d34172bd3484ff9fbefbe49c6d6_JaffaCakes118

Files

62072d34172bd3484ff9fbefbe49c6d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ