85e4f67bea4c5789f9fe6890c42ce56c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85e4f67bea4c5789f9fe6890c42ce56c_JaffaCakes118
Size

1.9MB
MD5

85e4f67bea4c5789f9fe6890c42ce56c
SHA1

681b14b98b1e1a3204abae7ced9ec30a9e5a91c0
SHA256

96042874a1203265c08f46120d42ac590caffb90e9c9e4af78b0cb8085a71914
SHA512

85734c39947c23808cef53a36cd9eac2bbf4fb17faf1465a4ca9ba79ebe8c4c1f3b700aed404d68f4879b3a89c9b963cf24415c08da77d23cd1c7eb56c1e74a4
SSDEEP

24576:BX+RmHa1E0GdksKTxTKe6mlpjk3FZe/SgORradW+pRJTkS7SU18HswE/iBLtT0m+:d+yxkpTx6mDxMMDJTjVeseTl0vb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85e4f67bea4c5789f9fe6890c42ce56c_JaffaCakes118

Files

85e4f67bea4c5789f9fe6890c42ce56c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ