65d872e2594bf7ae05e5ce6a12156eb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65d872e2594bf7ae05e5ce6a12156eb0_JaffaCakes118
Size

901KB
MD5

65d872e2594bf7ae05e5ce6a12156eb0
SHA1

899ef2aa14092eda14237242ede46fe0021df893
SHA256

af433960cbe3acb1cd4b37976a7481f833cc750bd69673a1bd1be769c0186a26
SHA512

a2481724e24840dd86e9c7b24e68c896ef130347ab71ecd7faa07c799f8dafc677232c7c23f6193c5f900c99594b732eec3b575192bc8765dfbcef14af69feeb
SSDEEP

12288:YTVCAOA3aQ/s4a4TUxjknSftzODGEZlETRmZVXO0o94R7yHjS1bUGOBYFm9nGGF:YhvjaCSVQ3Zi0/exMUmUGO+Ywe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65d872e2594bf7ae05e5ce6a12156eb0_JaffaCakes118

Files

65d872e2594bf7ae05e5ce6a12156eb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 757KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ