87dd269ddf9f29ee629f6feea7bf64cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87dd269ddf9f29ee629f6feea7bf64cc_JaffaCakes118
Size

563KB
MD5

87dd269ddf9f29ee629f6feea7bf64cc
SHA1

e620d1b5512cebee37c53d3bd177f511e9b904cd
SHA256

5142274b5251ef22f9a9b460bba2f3452308578cacc5766e7e085a4da9b304b8
SHA512

47bacf37d7af166d7b14ae693635f685add003335b770f696ea470e664713bd98d0e4c25e2c8e8359f34fa8bed407d90f056c5c2aefb1515cf9fcd64daf0dfb9
SSDEEP

12288:k9Ow221/pX3jVenyUhUKMjGJgTQFw+GKTra:kdrH3jMnpQNQK+NT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87dd269ddf9f29ee629f6feea7bf64cc_JaffaCakes118

Files

87dd269ddf9f29ee629f6feea7bf64cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ