a13de5bd5cf2831d176dff976d52387d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a13de5bd5cf2831d176dff976d52387d_JaffaCakes118
Size

235KB
MD5

a13de5bd5cf2831d176dff976d52387d
SHA1

eec31b42da699ec67cf02a6a190dff2252fcb609
SHA256

2f61be1527532c5e3cb52ec19261b0d22291c8449ed1f6bdff2bfbe280be7edc
SHA512

ac21ec75e9043490e7cf573e6cba60d7090562c51bdceeb4019448c5654021ffdd13a42a85924882533d44361d1b78e45d4f8712cd695f5ef1042140a04aec75
SSDEEP

6144:5WXEhlrJn/wh/WXg0Dc1TRBLf2pVJUQJQnm45lwBQYdy:56olrJngCg00RBOprQm45lE7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a13de5bd5cf2831d176dff976d52387d_JaffaCakes118

Files

a13de5bd5cf2831d176dff976d52387d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 117KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE