a01b499f66622b478c0b449f0db9fa1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a01b499f66622b478c0b449f0db9fa1e_JaffaCakes118
Size

44KB
MD5

a01b499f66622b478c0b449f0db9fa1e
SHA1

9dd3ca6cd645bc41a2a3abfb2e9296ac2b1a03d1
SHA256

0746688782fc96be2598933d3ced67588f1e5ea34bbab0e3d7dcb417b96cf8e0
SHA512

28299a50ffa24350e33cab7dec0dc2829eedc85ac1149bc7cd36bb923434ca9ebc2cccff6087598cb90a7f6a0a6c9b9c3ee87cc5220a0e93eb8fb6df412bd863
SSDEEP

768:PaQQgpBMIs06zby3euVU5PHhfxjj9JR305PBFtI35+isOpYFy7Nvf1K1OaLg:CvgsIsAgxRJRa5FtM5+isgYF8iLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01b499f66622b478c0b449f0db9fa1e_JaffaCakes118

Files

a01b499f66622b478c0b449f0db9fa1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lhhack
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE