01167d467cf52e200108752395568f4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01167d467cf52e200108752395568f4c_JaffaCakes118
Size

504KB
MD5

01167d467cf52e200108752395568f4c
SHA1

9b42478d8902bcef1dc653321df6b6c5d7e7e461
SHA256

4fade4f70b4a668087878b88ad2733a0aa7616c8eba055b74f107338e354dab8
SHA512

02686605fa3ff7f6ec7edb992b9e461b450dc7756a2e014a8a913f28662dfc107433df2ecb71376334443e0d193ab79ca36e66b79f95d3478f6456bbc99ef8cd
SSDEEP

12288:51bC8o5fQmHiKgrMXYerthcftOuh8UQdgv95JwiJECfZ:51bC8o5YMiKgrkVphcouh1Qdg5WCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01167d467cf52e200108752395568f4c_JaffaCakes118

Files

01167d467cf52e200108752395568f4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ