76d29f7bf592c00d4283a157cae4bd7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76d29f7bf592c00d4283a157cae4bd7c_JaffaCakes118
Size

2.2MB
MD5

76d29f7bf592c00d4283a157cae4bd7c
SHA1

32e9b44e86e3599e984bf61e05a947aca6f126ca
SHA256

f2dd5f3483e335c8f8c8613d694e29e534539667e472cf6fce83cf61b95aa97a
SHA512

bda3b315edfef02c0347f01b2edbaa68d43c11b29c4fcf815cf7a10ec9543c524bca72e2683dfdbd4b3d0c3ff4f57175f40d1850fca744e1c159081882fb90aa
SSDEEP

24576:wB7UhstNLi1rilfyMtkPdEBZSHqn3v028WSG0Ynmc5v1AjtyTyW5Whvl9yINhWM/:wKhsLYefDSZ28WSGKc5vzTyaWrPWc52Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d29f7bf592c00d4283a157cae4bd7c_JaffaCakes118

Files

76d29f7bf592c00d4283a157cae4bd7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ