970166f6e7494325c1521da7d5b48646_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

970166f6e7494325c1521da7d5b48646_JaffaCakes118
Size

508KB
MD5

970166f6e7494325c1521da7d5b48646
SHA1

45491cc3217cb0fab0408291b50ed951eadd570a
SHA256

5abe1ad975dc009591d3d6e6fd3e971e2d0eeadb57a72ff9ff2f34cec4a864c2
SHA512

1d1e467f7cf57aef970302ff6239f9cbe905b73d06b2b9da63023a9a9ad8076edbefea1ca1c8e722c496c4a2a6ce164e4542529a7218265a3e837582e1b5e78e
SSDEEP

12288:U96wMs5BZHJ/aHHDfKy/NN4g7E77FXaWXWqcgrWj:U96q9WflNN77E7MWDcgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970166f6e7494325c1521da7d5b48646_JaffaCakes118

Files

970166f6e7494325c1521da7d5b48646_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 477KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ