87a55614180b40e2a963be03df413350_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87a55614180b40e2a963be03df413350_JaffaCakes118
Size

210KB
MD5

87a55614180b40e2a963be03df413350
SHA1

91816b0fd1cf7061f609e6d8e7eae33fa154dfae
SHA256

a4b55dfbb836e94599d32732b132a76e3bfcebd17279de08ced8105f0e61aa5f
SHA512

3fdd5db97ce59f71c4668484f07928df88367e6636e14fac62d05413878a86edf11c786d50dff3d8cc2c7988a9cac1571c0b1e330208e42e4eb263983dbb8c29
SSDEEP

6144:QOPYc//////lOPZIpWuoEddLEbvJsG+nf8:9Yc//////lORKWydLEzJsG+f8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87a55614180b40e2a963be03df413350_JaffaCakes118

Files

87a55614180b40e2a963be03df413350_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ