a00c4436b7d723e5e88c61704eb9064a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a00c4436b7d723e5e88c61704eb9064a_JaffaCakes118
Size

2.6MB
MD5

a00c4436b7d723e5e88c61704eb9064a
SHA1

3b53a6d9fc24c90477b46acb97093069525f11a2
SHA256

48b769c1cd39a9c0e418ff1c824417a4e381a43e231d29e4143fa040c2ce88ac
SHA512

e7f5698f931b9642147a201db46ff3d11f9ba738550244046803164302e75caf28cc031bee6331cf2815be8139ae456dae27604790089ab8391dd3451aa77728
SSDEEP

49152:M96Y6ZgT5BH3qWed9fVP5Q+swrydNOtctaV+Hzln73COKSYGFrYmu59MX:C6ZgTn3q/rVPl+4tcYUHzljCdCYjHMX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a00c4436b7d723e5e88c61704eb9064a_JaffaCakes118

Files

a00c4436b7d723e5e88c61704eb9064a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.CODE
Size: 4KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1010.0MB

.krmsko
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ