956e3524bb79e917d19a431db522dad3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

956e3524bb79e917d19a431db522dad3_JaffaCakes118
Size

656KB
MD5

956e3524bb79e917d19a431db522dad3
SHA1

d7b39fae8c40cbe587ea0cce75c78a7d5f1d38dc
SHA256

67de2a8ba472281b4e5930d46a4fa91463477c68630868a365a3b1095fed3bb0
SHA512

35647f771753c9f0a72f7963254edd520aed02df392ab64c962c268574a4ccacced933608f8570fdd40a9419a4a3a085e56abfca8c9f2841e682d4ef6335d2bc
SSDEEP

12288:lf3aooXU1vBQzYe5RS980U8HuMKg87kIcoCsvIG7s9n8g2FtM4cpdY/voZxA+PIM:lv9H1vBQYR80duMWVosTFtCpd8oZ2+PT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
956e3524bb79e917d19a431db522dad3_JaffaCakes118

Files

956e3524bb79e917d19a431db522dad3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 482KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ