02c7a2d6e842ddd3d3abd50c0deda98a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02c7a2d6e842ddd3d3abd50c0deda98a_JaffaCakes118
Size

845KB
MD5

02c7a2d6e842ddd3d3abd50c0deda98a
SHA1

2cd445c225261e38b8294201674655d90538a917
SHA256

a48cc19ec63547aeca9d029c05f34b44f46fdc5ab84cc495cf782cd5cf2b716d
SHA512

5c1e108fa3f02fe8e693d241144f4f7bd751442e6176b8fcfa9cdef83ec1b4d712902bf05380968e433a9e21fb1b772adf952649cc761aeef2e8a937ac29c8e1
SSDEEP

12288:51b5wOEavbKFTnrt6wv6U5rlufKYgyqThSanHIEe5hr+VHvzKDSmY+lzKe/4:51b5wMvOn0UZrhzOhcLKDSH+lv/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02c7a2d6e842ddd3d3abd50c0deda98a_JaffaCakes118

Files

02c7a2d6e842ddd3d3abd50c0deda98a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ