788e1d474ddd928d79b65b4752cd4bc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788e1d474ddd928d79b65b4752cd4bc9_JaffaCakes118
Size

95KB
MD5

788e1d474ddd928d79b65b4752cd4bc9
SHA1

799f536acacb43f1cdab498a4ed170bc7dc0199f
SHA256

d66aa7fdaaf518e67c4430de3c4ebba8fc4b1bbbe29929d5809b0bebf5954453
SHA512

15cc58226f2032d24e98a352b85854cc46c712bb21bfff22b89b8fa3f22218e14da1400f8dd381e4ba8d2088dbf77e8143b3d0c31bc4f16593d571369dc69380
SSDEEP

1536:dDqcQDqyi1v9bODExmO2FbuE/oKzqCyrw+QJG3XUDT77Q5iNMRIf8kZsnhRiS3B:JWqyuJO6m1Fb9/gCow+Q4UDT77Q5CMO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788e1d474ddd928d79b65b4752cd4bc9_JaffaCakes118

Files

788e1d474ddd928d79b65b4752cd4bc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ