679dd68e9b4ba09e4a7bd1d839c260a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

679dd68e9b4ba09e4a7bd1d839c260a6_JaffaCakes118
Size

389KB
MD5

679dd68e9b4ba09e4a7bd1d839c260a6
SHA1

a8c311f91b443e9fa13d3909d0f93f3dc1efe7d0
SHA256

7da3ba435ea09a800b812d614960473926799acdc24db24bed911f37c01d8422
SHA512

b01ae91a7c08dc9b50677afec6ac7a60529678da9a78aa654de787cb97fa1295e19e02185f3f1106629afa2cbcbc7a62372451371df071ffe6d6d87999ad550c
SSDEEP

12288:S+9nORS+dkBBRQUFft797ndP14WySf0KY5n:BtOPQQU3JbRiq8zn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679dd68e9b4ba09e4a7bd1d839c260a6_JaffaCakes118

Files

679dd68e9b4ba09e4a7bd1d839c260a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ