67a6eab55056452fe4f99fdcbe187510_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67a6eab55056452fe4f99fdcbe187510_JaffaCakes118
Size

610KB
MD5

67a6eab55056452fe4f99fdcbe187510
SHA1

396e0cac96c602f63e9008fd6d0110f3ecb6dcb8
SHA256

e822b5c6c64bc77bfdec0b75c5edc05144ff037fa2672156e12b3da806fed747
SHA512

19ca39a629c5b27b6acae55a8471801fc4a4494712378758e4eab2facbaa31e6e205e5cd75cab685f22f8f81f13a84a97ae7870cb7dd38fff780e67a8703352b
SSDEEP

12288:6Lg2r6GinNFBNmn03rNW5lt76FjCPp7WmQr6eDqRrO:bY65NFBU03ZW5n0eP1WmQr/Sy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a6eab55056452fe4f99fdcbe187510_JaffaCakes118

Files

67a6eab55056452fe4f99fdcbe187510_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 891KB - Virtual size: 890KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ