820bbf6ded86e7d84b1e2175742d81cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

820bbf6ded86e7d84b1e2175742d81cb_JaffaCakes118
Size

536KB
MD5

820bbf6ded86e7d84b1e2175742d81cb
SHA1

df9c708f145901f171cb1dd9199491db5b80d6c0
SHA256

d92f97127b27db541a0c27b4b28a5bf0a94a7f912fbf8f39d8a6ee047ce1bc15
SHA512

dd3666cd45fa08cdf2f8edd03e82f5cad6fa3e8b5fdbc79a5c6cd7e59f4af7653bdf4b7260fc0111b3e9fe627a397cf103f51a51c0428240e2a97895f80bcd7b
SSDEEP

12288:P5UoQhMHmjxFtkpkyQ2icmID/acK7tWnvnVTQCX:R3V8xFtbyqcXG/7AnfVTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
820bbf6ded86e7d84b1e2175742d81cb_JaffaCakes118

Files

820bbf6ded86e7d84b1e2175742d81cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 468KB - Virtual size: 467KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ