868f5c4812e7fab16798be19fa54ae41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

868f5c4812e7fab16798be19fa54ae41_JaffaCakes118
Size

333KB
MD5

868f5c4812e7fab16798be19fa54ae41
SHA1

33675acafbc6bd7c094fda9a0c612d0861db4b09
SHA256

35320d3be81d9a45d850c17f5243e2b9f8974ca4f0c98420128536d7b059e5dc
SHA512

89bf7e05d7971d7fd9186aeed5c520803ff8e7abe7987cdf38051eb765559d9a904d0bd70d346c9ad57f1e894006ffb818921472b1b7e959049437d09866b0f1
SSDEEP

6144:Zlyjf/4hrrsw9LEP//goavUW7X4oZCdE0Yyor/MTBEr7Pt0x:yfGrswey3X4Sr0Y3r/MTuax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
868f5c4812e7fab16798be19fa54ae41_JaffaCakes118

Files

868f5c4812e7fab16798be19fa54ae41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 28KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ