851bde63c37d4ece297f762834aa39b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

851bde63c37d4ece297f762834aa39b8_JaffaCakes118
Size

16.5MB
MD5

851bde63c37d4ece297f762834aa39b8
SHA1

29a70a813f90fbe2d6e602c26bbc592a5743b309
SHA256

71d770a6864ba55ff349077ca87940ccc9350bd0dd759aef402f5812cefc3005
SHA512

0e0dbbd9b47eb2bf8c3118ac2f0799f6a75e7932653bfb7907229563defe63ebe99487f48852ed96a2913fee4e37cf1ece0624f0e24267d2f7c3f5953f480148
SSDEEP

196608:se1b42Y/aNlsgRQortxUlX84nrfkCbwLiP9ZT2qB/8zqycBGdgM+6B:se1JsaNqLmwG49wiZzB/CqDag6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
851bde63c37d4ece297f762834aa39b8_JaffaCakes118

Files

851bde63c37d4ece297f762834aa39b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

DATA
Size: 10.3MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ