745c63e1c351bd1f843d0a49d39fe0c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

745c63e1c351bd1f843d0a49d39fe0c8_JaffaCakes118
Size

413KB
MD5

745c63e1c351bd1f843d0a49d39fe0c8
SHA1

24ec92c1455b1f51d72769be652656b21c79d3ca
SHA256

c572f5cce7851231a6c59e8b085c49eda01381b47666fae5ee14cc7815c74d28
SHA512

236b689cad568a6c4a2d31b2a88214f1705899cedee9d4207e5cb593678c8dc2ee5067b3794b3c229ed3df7ec5c432551b6d26edc6a5357a476043b74be79496
SSDEEP

6144:dFmFdHrqSHMIUhG9HkRjzL3ZQJTglI+m3WhQbYCrwYCe8VhO56cVSSyhJozdi3wX:rltSJTgl3mGqYCERe/ojS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
745c63e1c351bd1f843d0a49d39fe0c8_JaffaCakes118

Files

745c63e1c351bd1f843d0a49d39fe0c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ