85dcf6c4077b0daa8c0d6b8117515143_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85dcf6c4077b0daa8c0d6b8117515143_JaffaCakes118
Size

95KB
MD5

85dcf6c4077b0daa8c0d6b8117515143
SHA1

2b2766eb13bd91e5294fed64a24cbc007d8b7cfa
SHA256

eb1171290de38ddc2b50e8f3d543542d6d15055c96a782b4a80704e0dc08f120
SHA512

0ff42702807cba946d6cf1e230c27072066555da356bf663cb4439c0d7e4fff5e57602766f7f2318d17057e2eb8ba477db4562d440b3d99f60a1f9ce01b629cd
SSDEEP

1536:W7qAQ5u/ZxvaDsXH8VgBeNq9KKCVBKxPcy83W8MWaqrGRhtau:qku/Z0QX8m8Nq9KKCVBKxPoW8MUa7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85dcf6c4077b0daa8c0d6b8117515143_JaffaCakes118

Files

85dcf6c4077b0daa8c0d6b8117515143_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ