784fe3353cc3d6df258c20d8a608d7d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

784fe3353cc3d6df258c20d8a608d7d2_JaffaCakes118
Size

5.0MB
MD5

784fe3353cc3d6df258c20d8a608d7d2
SHA1

981eedfd80b01dd1d08bc7060f8caf468ca1cb8a
SHA256

f62a3d1cc6d6109cc6a829cbad507afa480174f185759879730bd74be0575007
SHA512

c617bf174fa3f23be2d5cef832f222467f1c1afa202521f69a7fd9299b1277f1f8bc2336a9f49645ce42ad4672afa424badc0be7d30581c0dd30214c6ca2b10f
SSDEEP

98304:9uUa1YRl5r0kjOm+13XE5WrFTcV0EG80kvPHuUU/vMJjxfOlHEdxE:8Al5AS6+4JEGivPkEJckjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
784fe3353cc3d6df258c20d8a608d7d2_JaffaCakes118

Files

784fe3353cc3d6df258c20d8a608d7d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 981KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NewSec
Size: - Virtual size: 9.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE