69867db791fddfc325bf30392778d96c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69867db791fddfc325bf30392778d96c_JaffaCakes118
Size

409KB
MD5

69867db791fddfc325bf30392778d96c
SHA1

7b8e6465cbba7c444fd2e6675d0d54bf902d0418
SHA256

b25cbaf5ec7df28dd263a40f68598f01368f82d4baa71b5259ca4b9b116a8365
SHA512

f4560d9f244920110df473acf5438d0884e8555ee3f414ddb0e666d1c75da7248b1c93e06ee4511d51f3880fdcd6ea45ba13c8671e6672eaba053ebbb73e8f9f
SSDEEP

12288:7GCfQwYdqns40g8IEj/hy20JotTaX9Efx6Gwa1JofNuQfXVL5NNuA+sS:7Gc7HZ5XVrkA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69867db791fddfc325bf30392778d96c_JaffaCakes118

Files

69867db791fddfc325bf30392778d96c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ