01953d7d7c89d7ae3db6d5a05aece215_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01953d7d7c89d7ae3db6d5a05aece215_JaffaCakes118
Size

906KB
MD5

01953d7d7c89d7ae3db6d5a05aece215
SHA1

65bdeaa9f06b4661d0d9801182e7e6aedd9a60b1
SHA256

65670e0f827e5b2eaaf074c1e4cd7d6f267569c2bd61e87187ffc3ca1be526a3
SHA512

fd74a3b187a8f87109572e7861f1bdb58aa22e70fb19a5f33d995111a3e2893eb3926f2d7b4fed56972317246b0e417b93d851fe823e5400b9cccccbcc1d565a
SSDEEP

24576:51b5wMvOn3qzIjS8Wuyc9XCtc2UND8s+LcUJFP:5LOn3sIzWuycvbD8s+LcsP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01953d7d7c89d7ae3db6d5a05aece215_JaffaCakes118

Files

01953d7d7c89d7ae3db6d5a05aece215_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ