67a314cd3f11973cc6bc62921396d036_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67a314cd3f11973cc6bc62921396d036_JaffaCakes118
Size

41KB
MD5

67a314cd3f11973cc6bc62921396d036
SHA1

2c71bdc1b44475118d800478a638c379e894c937
SHA256

a301e8b3de28f7a3b7c294ad93a8217a08d3f6874f35b7576ba9052d0503cd41
SHA512

e55833283ea1c0b9957552c4041a3871a3be06b1ef062de99d555d6530f413981336f72b63af0aa53fe9d47b2a6e0b35a1821c6c91127e5a654f49e09fe148e2
SSDEEP

768:ZgqSwYqVQewSGkcDsUZ8GP387/9D8e4t3fKfv+/3rGa4Btop8InHw1XI5E7xDJ8t:Zg9ZqVQPN4UmNt8RZfKCp8IQdT7xDux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a314cd3f11973cc6bc62921396d036_JaffaCakes118

Files

67a314cd3f11973cc6bc62921396d036_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ