95857672f0dde60f4bfa96ec37fdf8a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95857672f0dde60f4bfa96ec37fdf8a9_JaffaCakes118
Size

743KB
MD5

95857672f0dde60f4bfa96ec37fdf8a9
SHA1

a7965b33bf1b4949d1508347d1181aa6a4e7077a
SHA256

7229468778c9e69f6664c8e978bf6f8aa49243f995eec2826b164bf8cb78749c
SHA512

7496d1eb5c66120a4b4df5c3b8777178bf2e2f0f14e11f8378386a9c639de0baa7d30096a280b093072d00ff568b4997b1d21e39cb632c1c0c22f9932897ed7b
SSDEEP

12288:nRn8S++U4u/n/80dW5A0zyo6JwQ5oAlK+GPHvZuIkitQQ52LYRg08yPwDRD0:R8MU4ufxdW5A2mJr/kNHvcIkih3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95857672f0dde60f4bfa96ec37fdf8a9_JaffaCakes118

Files

95857672f0dde60f4bfa96ec37fdf8a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ