789f46d8ea932c548872aa7a4b63e297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

789f46d8ea932c548872aa7a4b63e297_JaffaCakes118
Size

681KB
MD5

789f46d8ea932c548872aa7a4b63e297
SHA1

4e069fb6ae9e9d920ca843d0dd944b2ef31dc311
SHA256

082374f4150ba76707e33025d75a89df4886bd70fbfc5f2e8e1e0651827ac7ca
SHA512

8f2bca8a512537413662a7173bf938edfd0a1ad85e93a5cdc89dbc8f5b63407311fc5fe4c8b19081de35dd7731d9834657a55233d5c05521d3d9b0fca214c53b
SSDEEP

12288:Vg3H14SkvxgBarXsYkV7HSUDvQFaFbgWXqW/DcGZVs0CuZknWzI8Hm6rlu/Wu:2HyhpCarVk9P4aFMs/AGZ+9uOnWzIF6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
789f46d8ea932c548872aa7a4b63e297_JaffaCakes118

Files

789f46d8ea932c548872aa7a4b63e297_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 563KB - Virtual size: 563KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ