946d66bbdbecca8cb96c47713bd35705_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

946d66bbdbecca8cb96c47713bd35705_JaffaCakes118
Size

943KB
MD5

946d66bbdbecca8cb96c47713bd35705
SHA1

10ec9a49f26f751310d4af22cb062660f341f85e
SHA256

5d2cbe391240b2fdfa6a00500c85e9ed3e9d5d72a6a2a5d13579b4aaac91da87
SHA512

e61cb5268a79c6fcf2a28298b5bb151b32067ba1cb73ee3aec0db5e8f087760d5ed9c8d983a5502ab8764aa286af86e2084b0ef0aeaef764728c740f76586846
SSDEEP

24576:6c//////XTDd43TyqJxlQLoMwhM2KRG1BVoqkHA9WWmq/p:6c//////XTa3TyqhMOHh1BeBWZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
946d66bbdbecca8cb96c47713bd35705_JaffaCakes118

Files

946d66bbdbecca8cb96c47713bd35705_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ