670f7ea6fd61043a1623a7cb3880ac08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

670f7ea6fd61043a1623a7cb3880ac08_JaffaCakes118
Size

85KB
MD5

670f7ea6fd61043a1623a7cb3880ac08
SHA1

eb10d8faa77440587f80b942d00177c2f852c301
SHA256

c35e64189933d445fa1aa54b1c579cd74f421a80f18f17981f21f48a6211af94
SHA512

46dcafc58827ad103814bca77fe36420c55f7c72db9c2741a2af97398c14c2bfb3c48eddf5ac99fe0b819699cc476a4e1cc9bcdee89b6680ea1a7d1d08529d28
SSDEEP

1536:jNiaoOEWuxA7HnDydjD0mQNoTVKiVqwNOeXWjTjnkMHngSebVxthHGc7:kEEWuxwnDaaoTVH7pXkTjnk2n9ExzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670f7ea6fd61043a1623a7cb3880ac08_JaffaCakes118

Files

670f7ea6fd61043a1623a7cb3880ac08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 925B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ