973a41bf1d829097ea216c7d5acc7573_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

973a41bf1d829097ea216c7d5acc7573_JaffaCakes118
Size

1.0MB
MD5

973a41bf1d829097ea216c7d5acc7573
SHA1

9e47f5e31dda1cdcf4a606e749468944978d15cb
SHA256

aa866fac22505b66d089b56d3f8404e5b8b66414deef425ee14ae1f18519234a
SHA512

e6e43fde85aa97879ea8d86b027fa20985af5d720807e7b02edfb50e69441feb2cd5ef81cb725d0b62ac9caf562f7bfdfbac0d6176489c69dc0df4081fd3fdb4
SSDEEP

24576:oIfrkdzCX4a/qaFvLLeBpewEhhW5xLPh1qJXsCpOJddv:TjksXjmvuhW5JbIJpOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
973a41bf1d829097ea216c7d5acc7573_JaffaCakes118

Files

973a41bf1d829097ea216c7d5acc7573_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 501KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ