89a59faa6127910648fc85cac23ef872_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a59faa6127910648fc85cac23ef872_JaffaCakes118
Size

1.3MB
MD5

89a59faa6127910648fc85cac23ef872
SHA1

f54a720bee1fae8728576294fe70a02b015d10ce
SHA256

d6020636ad6926a6808e8a27578c7b35835c614cf34d11259c27dcc859a8d0a2
SHA512

e46f88abf14e1ad50d54a846a45048c71d7cbe9cca66b47abea2efb85cdfcb246e9cc3bfd2eeb93f83f9a34ecd33fbb9d9318700df820011ecc420a037bfa753
SSDEEP

24576:oMMj7C7VU08EZE8pUC6PiI1B1uSAp5Fm2CpUexLYtBqc4/FxJWKcAnYTEvEkARy:oMV+ZEZ96qS1uo9YOXEhEvnA8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a59faa6127910648fc85cac23ef872_JaffaCakes118

Files

89a59faa6127910648fc85cac23ef872_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 841KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ