97107a3abf2d13c053b2f57482079a2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97107a3abf2d13c053b2f57482079a2e_JaffaCakes118
Size

807KB
MD5

97107a3abf2d13c053b2f57482079a2e
SHA1

3028670ef18bae8f2c00b466c43153a077f40c14
SHA256

17d826d556119c040b4dd52b431e06f9a4d6e23aaaf4d167d411697a1bdabb6f
SHA512

fc511003055aa731ea0e16e538f7f910d87b68654ba5f0e656be7b87d864b78a7797b7ee48f7991e25d7e716c95f7858c296bb436f4018ad388f2c802daf78ca
SSDEEP

24576:syBqVWuEji6/+HUy2SDa66JN5Re+21L95RDI:38oWha6621L9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97107a3abf2d13c053b2f57482079a2e_JaffaCakes118

Files

97107a3abf2d13c053b2f57482079a2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ