a849e13527a0e791a0de1d68b09609ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a849e13527a0e791a0de1d68b09609ae_JaffaCakes118
Size

127KB
MD5

a849e13527a0e791a0de1d68b09609ae
SHA1

bb44374718af6b8c2a7a93b25343ce0ba6b6e0db
SHA256

5a07aeb14cb13ade68e8ffa7761b1821d09f40ed25e4d4d815c02268e486d628
SHA512

4d5462af77460a7cc185b2d1d565ccdc28e61153dceab0596d631777a0fb804e03c9ee1e280e967a0a259a8d04402ff72de390376da54e0fe2dc280407f2764d
SSDEEP

3072:QKJZx3+tGqTsnACpvmEhgwqvJ+Bsl94FqI:QKrxiyLvmWVXGls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a849e13527a0e791a0de1d68b09609ae_JaffaCakes118

Files

a849e13527a0e791a0de1d68b09609ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ