85021ac2636c33951cb61ef122a899b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85021ac2636c33951cb61ef122a899b7_JaffaCakes118
Size

118KB
MD5

85021ac2636c33951cb61ef122a899b7
SHA1

3d2ef9c22186b5e251a1aaebc6a94fbbea40f611
SHA256

d5bf7af301ef17068e986fa65c50d71fde39feb0cf852c2b8019a5530701059f
SHA512

24951416e8be4c25e045c0b694faf17206c5e5aed0ef70d0a0308b56c5bf9a20c81d6d5dece32fba28ca2961571dc7c37afa6452634de2f27b652ec087238ff5
SSDEEP

768:1C1qfQ4YUhwUyZ/rxwb+b36PRS94H6Gt1CLznNWO/9aJr5nO4rGQzTGfmgc33emO:k1qfQ4YU29rqbu3SH6N3hQVgd54vCx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85021ac2636c33951cb61ef122a899b7_JaffaCakes118

Files

85021ac2636c33951cb61ef122a899b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ