a2cd54498a9695d092f09369f87f3783_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2cd54498a9695d092f09369f87f3783_JaffaCakes118
Size

335KB
MD5

a2cd54498a9695d092f09369f87f3783
SHA1

912fd3c5106e5965e811d69fb10a80339447dc60
SHA256

72a5d142819f044101ae69d535fcc9dec1720176893e886f60f16ebe4b597641
SHA512

2100ccecd7256b054b70b1a6085871db0ed85419a51cccf0f1626bbe12d02f47bc0c54a2e4788195454f3b1039cc0547a86809fe3a44e2773de4f25f351f0bd7
SSDEEP

6144:pwP4r8LjqI7/WL+JVtyYER/jCZw0SjMa6T6qYo07TBQiJyh:psR7/WC3tjSjj6T6m07Txy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2cd54498a9695d092f09369f87f3783_JaffaCakes118

Files

a2cd54498a9695d092f09369f87f3783_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ