741572b82442c72a108a03564680bf3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

741572b82442c72a108a03564680bf3b_JaffaCakes118
Size

20KB
MD5

741572b82442c72a108a03564680bf3b
SHA1

0566baa810fa9905278e7a7be681c15c9896f82d
SHA256

d85d936673de74232a5c12a3afb7b213929bd36604b737b546a93f8523a86276
SHA512

6b6056833b3cee44335228eb98c7b3d4cdf3e3030708806ce6aca9a862c660a9b30a5b01aae206ffe315b30196dfb81398a7a1354121186b19267840aa73c184
SSDEEP

384:UTYExX6faR8u/ij7m+1IxVPMtfZuqZJNuoPwTLJRb4SODRIGMxzM2PB:tC+amu/ija+1Ijw0YNu+wvJR4SwDsM2p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
741572b82442c72a108a03564680bf3b_JaffaCakes118

Files

741572b82442c72a108a03564680bf3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 731KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ