72d1236791c0a58e1abd0056594cb581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72d1236791c0a58e1abd0056594cb581_JaffaCakes118
Size

47KB
MD5

72d1236791c0a58e1abd0056594cb581
SHA1

8a8d3f0827a224ad35edeb2cca5278a60afe5993
SHA256

f60aa60690fa0f6ffc8a71f4b96e60c12cb0c0f7cfd05a70cc4caad48f469868
SHA512

858b599aaeb6d5d8de873604e4edc715050fc9a556a8cae1435c0206f45f5345110486814143d0268de9db6285c982ef9edf6da90bfc0834e4736fa8dabcce57
SSDEEP

768:GfDulGvV6WEs3C1uV8o3udXPFAK8dmDx/K9IR8BBlr2R9HZxp+6cpuJBmr+2+ozE:oDmGvEOy1uVf3udXdAK8dmDx/KOR8BBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72d1236791c0a58e1abd0056594cb581_JaffaCakes118

Files

72d1236791c0a58e1abd0056594cb581_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 742KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ