772ed8c3802ae45cfa36f138f15d4302_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

772ed8c3802ae45cfa36f138f15d4302_JaffaCakes118
Size

4.2MB
MD5

772ed8c3802ae45cfa36f138f15d4302
SHA1

17f97d4f82d404a31191c2101cac2dea4c9a5552
SHA256

5a07e9a026cc44b3759a637900c23a4c0d2f149c4fadfa349e17ed4a63b9c97a
SHA512

05fc32433586b78ff30b4c59af0e58796c792a7f58aea1de90f465feb547349cc5525fdbec7b9b937b92c6690745b6d59b7baf8b5cbd5af158c5165d962a0f32
SSDEEP

98304:y7NE1ziYo3B3LqiXYXzyzL5gWJuKOt1T8EDNW8EZzRlcIqs:y7sziYo39LqiXY+X50r8EDk8EZ1uIJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772ed8c3802ae45cfa36f138f15d4302_JaffaCakes118

Files

772ed8c3802ae45cfa36f138f15d4302_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ