76dcfba0f623c6f084230ce6ce549967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76dcfba0f623c6f084230ce6ce549967_JaffaCakes118
Size

561KB
MD5

76dcfba0f623c6f084230ce6ce549967
SHA1

6cf60270349e697e271e9b6fd2c8330e2d976a44
SHA256

09bbdd449d11ef21f3d561a69f29319c3a0f312e5fa62c626ab66b32a98dd126
SHA512

63740e97a52c325a9957b324e02d6f4433f088c7b29adc17529126f968e1c6a6ecc59532c15fe299b2545fb779b25af1a137c4527015d2b0f0aa1e707a796867
SSDEEP

12288:F2rEVK/bLkwtDnpPIBF+XIZrlUQzxPut7P:F06OLkwtDpGeelUQzxW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76dcfba0f623c6f084230ce6ce549967_JaffaCakes118

Files

76dcfba0f623c6f084230ce6ce549967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ