666be1573438da1d47bcd201d5c41a27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

666be1573438da1d47bcd201d5c41a27_JaffaCakes118
Size

167KB
MD5

666be1573438da1d47bcd201d5c41a27
SHA1

987f5d85780e0ecd302e1b52268b1e683253468c
SHA256

8309b4da22e271951b655c53efb95808902eaabffdfbb5cc58c5d00918681390
SHA512

a77b8777ad9a279c2ad4df5b9911ee5199c9193f92c2a2f603d97f82db7089d61cf49e3636b1f94491750f6346d141ed4d5a3d8a2c5ec730038dc7efe4e21a21
SSDEEP

3072:HoJLQ/DbISwTN8wZoZZBDbUC/NuLQCIAOFDdNj76kcKyqjyNVgVC8SGM4xk:PwSwGZ/bENOFDjj7pcKLjogVCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666be1573438da1d47bcd201d5c41a27_JaffaCakes118

Files

666be1573438da1d47bcd201d5c41a27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

jsdugviu8

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 317B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ