0579b482a79edc0da0317c226c0b97ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0579b482a79edc0da0317c226c0b97ca_JaffaCakes118
Size

216KB
MD5

0579b482a79edc0da0317c226c0b97ca
SHA1

b57f95c841c3c9e168bd376e5d1d5af9de16da67
SHA256

c48dcb5548fd2987ebd2fe4b300a4fd6896b6e008ba4b193ca0a7346bf47aea3
SHA512

ceaf270ff41e235d51b5ffe98bdc45dffce8d2d459a40e2237614f20ece6b627aadfae14fef7ab4249fc0204bb630546cf1670186974e222eaa31417035978f2
SSDEEP

3072:l9DtSoETWAFNW22dxuZZYNoF1Sy05Go76HGvml/f97Skhc8j0Le1L:xSoVAFNyzcYojHfl/bBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0579b482a79edc0da0317c226c0b97ca_JaffaCakes118

Files

0579b482a79edc0da0317c226c0b97ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vmLSy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ