640e4799c824790d78cb7adfffcd1a64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

640e4799c824790d78cb7adfffcd1a64_JaffaCakes118
Size

73KB
MD5

640e4799c824790d78cb7adfffcd1a64
SHA1

b32506bcfc5951b42382b6c51c9e8d7cf3488323
SHA256

0dbe3b5d8b5bcc41bd6f919b501a5e2bc4697c6596082a12efd0edd42c56d9aa
SHA512

dd976db68b8c9d9b7ae451fe664cbdef7bd3c462582e2ab57aa3745936d79f8d206a0f8f75d378fb6f681fa314919f98d49adb8f7912352d6c89d6d471b77f51
SSDEEP

1536:ASjL2YErVPdH3OxK/hyhYW6BEkcYClwzsd1ka3XhYZzZ6TuGyF:ASjL2YEr5Z2VYClos3ka3RYmjyF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
640e4799c824790d78cb7adfffcd1a64_JaffaCakes118

Files

640e4799c824790d78cb7adfffcd1a64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ