76bfa069e96597da378019858b043f22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76bfa069e96597da378019858b043f22_JaffaCakes118
Size

237KB
MD5

76bfa069e96597da378019858b043f22
SHA1

fa2021a5f08ac99c804328195ca49bb314f6daf8
SHA256

cafadbbcc60f0b5892ae60f00cb16278220c270c728700bd84b5d49b29424741
SHA512

4117401435fa502cfaa329f8c71800bd0d86cf9a36ef662b9fdb0e32b678a9e2a209e1c0068e3f5c18152ac4fef8df017a314e570b4d2f197c30e004b4ea4161
SSDEEP

6144:cpOUXxV3dbJjMbCNn4cLgyFruc5OqJ/wLBel:cp/Xxfmb04ccOCDbB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76bfa069e96597da378019858b043f22_JaffaCakes118

Files

76bfa069e96597da378019858b043f22_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ