833787f68ac4847784712f0f18d99a94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

833787f68ac4847784712f0f18d99a94_JaffaCakes118
Size

797KB
MD5

833787f68ac4847784712f0f18d99a94
SHA1

aef2f7a54b4fa86b7322b8217724f3fd61fac4f5
SHA256

97d251d17b097f1bdce899c2f9af1b8d45d856ac3637f0a85f2e74170cc05762
SHA512

1f8af9c3d8ed1bb09075f5b9032826c1e1aa5379333244faf571acd018d4664dbc0d6b73cbecc188f5bc4f7ec051b94d87f31e40d77a2bedeb36403263ab4052
SSDEEP

12288:OTRvPae31u72g+gkBXjmupfR7mtTnpIHN7F9x1DDvLUi5X/+sd:oJPae3Y72g+zmupitTnpcN7PbDvLdc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
833787f68ac4847784712f0f18d99a94_JaffaCakes118

Files

833787f68ac4847784712f0f18d99a94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE