960685d6cca1034932cadeb613504e6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

960685d6cca1034932cadeb613504e6b_JaffaCakes118
Size

654KB
MD5

960685d6cca1034932cadeb613504e6b
SHA1

c421ceb6d3adf469841f70d2bd0421cf09bc617b
SHA256

43ab49df667e454032b28335f8d11a6c21ce51f2b6ab36cd6925dcd2362ddab7
SHA512

47260f0b2015e881b15568a9f56b59131f94a7277336eb6e8e378d1d4bbd0049b95846d4f3f7905751d022d8bc4448db6e5bf859452354d09a72ed664baeae99
SSDEEP

12288:kkv6XIQsFPCpGFky+vx2P+2kUsYRIPAMCFfucUnC4E1Gw8q3Atha:kXXJsrFk2P+cbRaGFGpCRGNqSha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960685d6cca1034932cadeb613504e6b_JaffaCakes118

Files

960685d6cca1034932cadeb613504e6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ