89bacd0b9feb3f96e02032f18023d264_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89bacd0b9feb3f96e02032f18023d264_JaffaCakes118
Size

219KB
MD5

89bacd0b9feb3f96e02032f18023d264
SHA1

b20d7d028754113377bd6cbb08f87ea903dd0360
SHA256

73fe7e721806d7e4fb1420feb726ffffc947d9dfea2669b6253adc37d594c957
SHA512

77978f3f992f9aca3ea01d0a36a9778c44421acd79cee5fefc8823e2667bd83860b24ba5d8366ad6edb11f07e8f6b2ec94fe6f61129ae4ce0e6c73354719ee73
SSDEEP

6144:PpadriPatPZU3SjdsDVwuIN9HeFOveZZwsUFeDKMZ:gdrKathp9HteZGsbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89bacd0b9feb3f96e02032f18023d264_JaffaCakes118

Files

89bacd0b9feb3f96e02032f18023d264_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ