632221bb39f335a9901bd7a6d8eebf1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

632221bb39f335a9901bd7a6d8eebf1e_JaffaCakes118
Size

674KB
MD5

632221bb39f335a9901bd7a6d8eebf1e
SHA1

2fecfc0e404df2667358e6b9e705b53d191c7c8e
SHA256

58ad3216b83d073a002bb3846b33568d4e0444d8214e914430bcc955a8780d8b
SHA512

cf1005498fd7c3ba608ba4b9af0419818ab65150c028b8a0e7377324aa1d0e3a85d19fae821bf924816aaa11eae631ae21bfa789d653435c023707329d2fcdb8
SSDEEP

12288:9VqMmgbYt3ZixoYh5v9F1jDl9/H8GvqnuLRo74xbcDynJk4MwNDjjDLzDzjzT7L+:TdrYtOD9XDTHd+u67+bcDyJNM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
632221bb39f335a9901bd7a6d8eebf1e_JaffaCakes118

Files

632221bb39f335a9901bd7a6d8eebf1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ