891f3a0ccfbaead142ee9e7a84e1c942_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

891f3a0ccfbaead142ee9e7a84e1c942_JaffaCakes118
Size

375KB
MD5

891f3a0ccfbaead142ee9e7a84e1c942
SHA1

41d46ea5b0c15cd8cb2c65a0596fae76c9ef68d5
SHA256

409900f3dfed34d0b86fcabf8f3084141e06e6af9a9b83c225f2f39717e05c5f
SHA512

77d9a3a5d40635f4b669e5d09e2da0ed447a18532a66c337748d15d181360f157e49a79c8bf88a9e30ca3131e58a7ff408dc0c7b0430a59effb0b52515811dc7
SSDEEP

3072:TwVYDt7M8OkPUWuc3PETRQ8iGfWpmTiBv3kUptz3V2ndtMjz:sVq7/oWt4zIkUpx3YU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
891f3a0ccfbaead142ee9e7a84e1c942_JaffaCakes118

Files

891f3a0ccfbaead142ee9e7a84e1c942_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE