876e216cbe564c989f1d234d1898c189_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

876e216cbe564c989f1d234d1898c189_JaffaCakes118
Size

4.4MB
MD5

876e216cbe564c989f1d234d1898c189
SHA1

74ccee8e094cdf6c5c3d75f1601fd47ec9eb09b8
SHA256

ca3828ab7b1d27d4e0123552c87b09b4a333c8b2622fc6f0c962f204d6c02a9d
SHA512

c0bbb8b4f599c04d98bc8a5174dca29e282953196fb7bce2ecbae0248d8836454f07fd6f4c0e08c05be2c0e8c7c96be47d7bf8574e05a48b2905adfb083f32d6
SSDEEP

49152:KRUmmoHNu/99BMmkik1Ce6IGWaHBllcrHLbe:KRVmoHNunBMmki6KWahSbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876e216cbe564c989f1d234d1898c189_JaffaCakes118

Files

876e216cbe564c989f1d234d1898c189_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ