a198b400509da5f6d14e88d9f5bf5e99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a198b400509da5f6d14e88d9f5bf5e99_JaffaCakes118
Size

741KB
MD5

a198b400509da5f6d14e88d9f5bf5e99
SHA1

ce481aac55eddb362ca115eb5cda6c9c5e286be7
SHA256

563bc837666cd70713e6dcf3e07291ab159a85f6f37bfdb4b4118a204e8b5e21
SHA512

7e559df02dcc4951fac3a0e00c35d7b40c038f4586470063fb51f953dae6d7b091c708be5952aff25428e133600d260f6214988e2c5b204a3e8994e2a6c2746f
SSDEEP

12288:dO4fZomQBxwm9mXF2RzbYHqfruoZXTLNb9YrSg9qYE4wYrFlvQPsQ/1sxhDm:dO3BxlaF2RzbYHqfruGXFb9Yf9fwYrX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a198b400509da5f6d14e88d9f5bf5e99_JaffaCakes118

Files

a198b400509da5f6d14e88d9f5bf5e99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 516KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ