691255567cd45df32e65162969779dd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

691255567cd45df32e65162969779dd1_JaffaCakes118
Size

682KB
MD5

691255567cd45df32e65162969779dd1
SHA1

6e1bdfd3cf1546d3a762623af1cb49f83816cf1e
SHA256

d779c1b21a4746c21f32cb655717c953f48051b9ce9bdab4ff26ac70d21ebc32
SHA512

3252878aa6e9496839a340dc743d2cd43625789b94080498a5c4d142b904e7a3403822ecdae81f79576c16f36f74f2c3d5c8f0730eb3c38365c86d7c6d3a2280
SSDEEP

12288:XTLa/4JGlup+GAY6nDWVO/Sx9DISX0GQ77BMOn523k7nsT7sX:nGPlqOVs5IqQ7tX5fzsT7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691255567cd45df32e65162969779dd1_JaffaCakes118

Files

691255567cd45df32e65162969779dd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ