883a43ec7ecee9dd65e95033d0903943_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

883a43ec7ecee9dd65e95033d0903943_JaffaCakes118
Size

761KB
MD5

883a43ec7ecee9dd65e95033d0903943
SHA1

dc6f6d10edc32ae68aee6017396b10746486870c
SHA256

2505e3c98e777826b94ddf274946ea8f65edd0bc7fee4bc05aa3d4410501918d
SHA512

74e4055d360cfa39dc9f7d803157a27d96c647dbe7f9e533751b0dcd7210ba8b115a88691f95bf0638374e295437d933f33f5ff58ebcd816625cbcf08c8e8f3c
SSDEEP

12288:HVcCPTyZkl4XUXvf/jRnCO1EmXIGIG4TvCVL7TGdhNs9RO9qpJcz7ruKaquc8Wjz:HVc/kl4XUXvnjImKG4TKtfKs9RlWzH3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
883a43ec7ecee9dd65e95033d0903943_JaffaCakes118

Files

883a43ec7ecee9dd65e95033d0903943_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 747KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1011B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ