a491f631310e78a9a191738333b58bea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a491f631310e78a9a191738333b58bea_JaffaCakes118
Size

148KB
MD5

a491f631310e78a9a191738333b58bea
SHA1

e511a21aaf6a286d072bdf7ffd7649e60c051345
SHA256

f51d5fbd0f6989b20910beb8099a3712420c244708e94f543a1b2a843bfbaa01
SHA512

56bf28b7f269d5f90d9f2318f48909fdf405db1e5e13d8db033071d1215a428f378d6d915f0a6048688abe0fc8bdd103f7dac8d1434c838c0139facd78ed53b9
SSDEEP

3072:1XNrvDFGqXdyQDzC7/Ye89yKNmorruRNIzemuIXLFIy:1XNfFGwdyQDOcpNdsNIzenI1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a491f631310e78a9a191738333b58bea_JaffaCakes118

Files

a491f631310e78a9a191738333b58bea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ