858a6d5d9eb8218d8ffe87b61e899620_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

858a6d5d9eb8218d8ffe87b61e899620_JaffaCakes118
Size

664KB
MD5

858a6d5d9eb8218d8ffe87b61e899620
SHA1

403dec591a56d1e5ffe1d71dcc0e0462a4db6ecf
SHA256

5213f422b84e75d3d75bf72a9d0ca50e64d4f6bc98360d51a71842ca5a2ae39a
SHA512

558a96f9e340d3a6ce273689d1831d581f4ee311837194a689591fd36047c9f11f17d7b86b825d198bd7fa2943e9b29b880543632627e8851ed507a5b1562191
SSDEEP

12288:3vYgVEr0f0HIHHQoYjtsYQtqz2oJqH0hfC2ZKV/ZgkbzY1c6F3guXU6:3xmXHgH6tsYNCr2Ze/ZgGsOKgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
858a6d5d9eb8218d8ffe87b61e899620_JaffaCakes118

Files

858a6d5d9eb8218d8ffe87b61e899620_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ