769ae7226533b8cdfc328bd9505fb6be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

769ae7226533b8cdfc328bd9505fb6be_JaffaCakes118
Size

710KB
MD5

769ae7226533b8cdfc328bd9505fb6be
SHA1

d2b3686e656e15cd5459d4845d6a4f4e4147cd1c
SHA256

f2ad8ddfef0daacbd53253900241a17eb32af1031b149a14790464ee1ce9ffb6
SHA512

64add319ae0129f6cc0f9438ce8842c2ca2d31f5330c4ad076923935ff0cb3e1718ab34de7d8e233f266f31699cdd152bbbea8c410a27c5828f5f5d6b89566f1
SSDEEP

12288:8zbIrrx4PK0QTpY0sFm9UvWTYghNGUftjOANduIAu31CQyKEsGRocG5HfW6LsEOg:8wrZ0QVYih3ftjMusXGr8EOOQ/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
769ae7226533b8cdfc328bd9505fb6be_JaffaCakes118

Files

769ae7226533b8cdfc328bd9505fb6be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 606KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE