a1bef91fa06bb9a962f86ddfed1934d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1bef91fa06bb9a962f86ddfed1934d6_JaffaCakes118
Size

772KB
MD5

a1bef91fa06bb9a962f86ddfed1934d6
SHA1

38536510745bbe0630609c261e3148dfcaee2d52
SHA256

99156f4e053f9bfe7c410f38d5d20ac53f1fd11241d84f78741dfe67f50c00e6
SHA512

0f4e828dd157a37088a541715482ca3c713f08b9925d85bfd0c70f272ee55d59f75d55b0ae8c61a47bc4a5eb59ae78665fbc23debd3ef88539dabd1b955e8001
SSDEEP

12288:JLpCTPpU62XfG86lxc3HaqmvMd2yhK2z+HgY0MGePS8:7mPJ2urlxWa9RiK3N06R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1bef91fa06bb9a962f86ddfed1934d6_JaffaCakes118

Files

a1bef91fa06bb9a962f86ddfed1934d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ