85b73754cc7c0ab38605c6a29cd71666_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b73754cc7c0ab38605c6a29cd71666_JaffaCakes118
Size

558KB
MD5

85b73754cc7c0ab38605c6a29cd71666
SHA1

5d4c92197a3759bbd4478f55bf0203b0bd6e62de
SHA256

d3d331f8b88f3647282288202a75275f7b11925be3c8e57399e542ef548d289b
SHA512

d56f5514ac1591ac53505a77db0520eacfa711c2b8a0e777511ab3bf7aab00f30ddc6b555588d958ac857df66a0689240118156832c675a28c8c13dc264e17f6
SSDEEP

12288:+yexPSQPI75eXBlq5aGYiT1sZR5MSyIqSDZQj/:8k3leXBlqAQYXESqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b73754cc7c0ab38605c6a29cd71666_JaffaCakes118

Files

85b73754cc7c0ab38605c6a29cd71666_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 483KB - Virtual size: 482KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ