7012527bafe4161092a495c7bf0a774b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7012527bafe4161092a495c7bf0a774b_JaffaCakes118
Size

3.8MB
MD5

7012527bafe4161092a495c7bf0a774b
SHA1

ade54716c407d5e38f72f23d24625d2def1f9cb5
SHA256

3f2704c433d4fa76786afdaa5cc9304d524677baae894b2147d9ab4ef4c443b5
SHA512

4d89cf3256b7c64aca2e80f14fe56b7c3a19b19f0c9feef9b380cfabe8fd5dc946c1d65d67e2a0e3901d692abcc7690aac4b64592b2f26ca02746d64b60d0f51
SSDEEP

24576:YnWVhGfRMmBYYMW82U1qdcfvx38Vyfh1Xwp+nsy1VI5Eu00CzWt8jh83dG8Wzupg:YWLfY3dwqEDXwPy1VI5EjWuT8Px9vZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7012527bafe4161092a495c7bf0a774b_JaffaCakes118

Files

7012527bafe4161092a495c7bf0a774b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ