696a702d486296d9ad0495991a5e9cfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

696a702d486296d9ad0495991a5e9cfd_JaffaCakes118
Size

390KB
MD5

696a702d486296d9ad0495991a5e9cfd
SHA1

d0bf258bd53c7c789cc725e2de33863d520d4ae9
SHA256

0143d7fac1f7dbf70da99c0ef2644e6754b47cf373700fc4661d2d3956612315
SHA512

db275bdc9529de8bb7c24f6fb02be887844dc68749403117adedb8d147d00ec6a0b5984982fb6f5eb602eb6fc76236358d6395d82a9a19a795e2a190107e1f0e
SSDEEP

6144:tz6RCchT+WvshDcpsa4aFiOXI+Q3SY2uKd8wFZ7l5b2XKqe+bwWX1lOx:tz6Acl+q+Dc6a4SwsYTKd1F6Ze+EWDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
696a702d486296d9ad0495991a5e9cfd_JaffaCakes118

Files

696a702d486296d9ad0495991a5e9cfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ