624edbd68e18dea398619afee2527dac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

624edbd68e18dea398619afee2527dac_JaffaCakes118
Size

237KB
MD5

624edbd68e18dea398619afee2527dac
SHA1

dd7d730ac852b950fbf7ea8d52bd13f4559b1c88
SHA256

0c66024d2bcbab2b4bd0eb35ff970768cf98343cefc89cd0aff205bc7f93627f
SHA512

4b99200b19165ddc966e901d35f1377738e4d8cbc5e56f359fa64733e83942088f742cf1637931eaa7796fd01f8f329e2b351cf8bdc98b318d6646b698f5e929
SSDEEP

6144:Bo0SaDkwPoSqI0LP7dodoayF6ycNFvBN+FLmfJw:BSaQwBirzeF58Lm+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624edbd68e18dea398619afee2527dac_JaffaCakes118

Files

624edbd68e18dea398619afee2527dac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ