a322129854bf6b0c0db2e1d6d54bc86c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a322129854bf6b0c0db2e1d6d54bc86c_JaffaCakes118
Size

1.3MB
MD5

a322129854bf6b0c0db2e1d6d54bc86c
SHA1

ce30c561c256a89e1191c9b7af3c1bc8622ae43e
SHA256

69e6649d1f71b73f050ca01f871e9722939affccdb93e061e7d1900ba3479bd0
SHA512

a7de3b0de7bd53b8abf43a788bcb5a1d9a50fd8abd498ab978b697f73b20c4b815c55744e733aa05c8f32a65fcb5b1481182dc0c9cbe25efe0e8cb13940aaef3
SSDEEP

12288:sw4Mq/4kC4opF0n7FTVz/lFUshVm18zwP4LLMxlzWu1jLhJybkmU62yClFu2B8If:sokFooxvyQJL4FjttFFu268NH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a322129854bf6b0c0db2e1d6d54bc86c_JaffaCakes118

Files

a322129854bf6b0c0db2e1d6d54bc86c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 931KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ