874ff835c68ca79f68669d80b6996994_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

874ff835c68ca79f68669d80b6996994_JaffaCakes118
Size

384KB
MD5

874ff835c68ca79f68669d80b6996994
SHA1

2251504633428b2e4280037a6e98d8920b62c813
SHA256

e29cd51faf5f9b19077e3502841248503f26954e03c3f7c1f3ee911983233d86
SHA512

319d5bd376726a71a393187decf210ba1dc9d34abdf3db5c2e09d9a967671b441cea386262163a951c0b0e58c404eec9d6ae08828571a3bec1e6e30f52b25ccd
SSDEEP

6144:xzg76+KJJEq5ZFBvh+SCJ5wBTw0inZSg07cRhz/XmhuO+BM/5nwGnB:L+KJJB5Z3h3M+iZSVwRh7XBIVwGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
874ff835c68ca79f68669d80b6996994_JaffaCakes118

Files

874ff835c68ca79f68669d80b6996994_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ