858c4af6a60d6c8798b70abc2d49134f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

858c4af6a60d6c8798b70abc2d49134f_JaffaCakes118
Size

710KB
MD5

858c4af6a60d6c8798b70abc2d49134f
SHA1

0f92a15dc192820e79785cae010e5f04753d2d1f
SHA256

069c469cbe9c7a99ae374a4374730db1dc9cc9e7d5a70657c24b8da7532b73af
SHA512

58e37d057bed4fde8c4bd0ce9ad0643e67b873877000feb35619b3e4c00df41fa7a0779f0a70d424112c2882283939d033887ac45bd1fd302b5605a2c1298e42
SSDEEP

12288:88j2Hv9BczP5RnMW5AI6sV1x31duhUfiY0g9xr8GUGR/w5swmvmtLmQ4soW:Nj2PPc9RnMW5AI6s131khY0MxYGUGFvJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
858c4af6a60d6c8798b70abc2d49134f_JaffaCakes118

Files

858c4af6a60d6c8798b70abc2d49134f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 652KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ