64313fed1ad39b0a912993fa8dd9e9fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64313fed1ad39b0a912993fa8dd9e9fc_JaffaCakes118
Size

190KB
MD5

64313fed1ad39b0a912993fa8dd9e9fc
SHA1

26f0c2769f0839e73fcd838538e0671b56ac0415
SHA256

3705453c620968474fbda962cd8f35ab4ba7981e46ec582b03431ea393857d5c
SHA512

46db8e6d8dd218f8ba578edf4044fd0d87c824536072d1dac14c0f6b0e0e53cb605adf21915dd79edd7e2f23f7da1497b6eb6130c64a30b12fa3a0d2f4369a7b
SSDEEP

3072:hmibdbKiiJsTVlvtw60E8+Dnhx8xPwafz0Liqr5fsopYkagN6xLVFVFy:hdRKJsPtf8+Dnhx8xTI7NfsoAeULVP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64313fed1ad39b0a912993fa8dd9e9fc_JaffaCakes118

Files

64313fed1ad39b0a912993fa8dd9e9fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ