a00e780dc804d098240d3f52e4a94df2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a00e780dc804d098240d3f52e4a94df2_JaffaCakes118
Size

530KB
MD5

a00e780dc804d098240d3f52e4a94df2
SHA1

f65565754983c007a54f59468f8720febe18e4bc
SHA256

2911071d5fe4ac179b5cae45c6e3278ab871ec2889148645fb3df6698a536dba
SHA512

34a45adb231c1cb9d4f79f7b774c2d43cd112770075d6bd42af18d93eccf54e9c5be74bd0f81d10a17f3af18f82893623ce96afcf1c66eec56e001bae9a32fb6
SSDEEP

12288:NigdXOvJp4Fff27ntyEal2MlHUFPnme6R/le8r+4x:sgdXCURo8Up8rz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a00e780dc804d098240d3f52e4a94df2_JaffaCakes118

Files

a00e780dc804d098240d3f52e4a94df2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 523KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 726B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ