88090bda83cf1438e8505667c4d0390d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88090bda83cf1438e8505667c4d0390d_JaffaCakes118
Size

1.7MB
MD5

88090bda83cf1438e8505667c4d0390d
SHA1

317cc54ae5c6fcd5fa361fac1fc16704e5a36812
SHA256

194a98f316cafeb19a049ae87b5eb96ed1b58710ba7e50e31aa63521e8de3c36
SHA512

069c4e9ced364dccef91094d30465689328d8f130790a79a31895f5c2d7d57d066c59cfde6539ce879764c5ddccbb7114610718653789ea46f9e2737bd66883b
SSDEEP

24576:nc8QwAFcRg8SJ05KWn/xMJ5U2E4evvDZqJgliK927C7:ncZIhu5n1eVqmil7C7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88090bda83cf1438e8505667c4d0390d_JaffaCakes118

Files

88090bda83cf1438e8505667c4d0390d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ