a8591a479cb21f85e165602702786a20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8591a479cb21f85e165602702786a20_JaffaCakes118
Size

226KB
MD5

a8591a479cb21f85e165602702786a20
SHA1

1089d70b227451b57e11134b5c9f90df540e2d4a
SHA256

467dd64de6b7bdf3923dcfb9150bc332a4e360ae72f97d7b5be4f5310b32f413
SHA512

6dd94c717f27bc385588048d590da72da4d8660a028779ec8069139a5536931dcdd3db71d42c93431f6078b19588cdf1e71dd3285069cc41c078733d21409764
SSDEEP

6144:JulD9563A5RHNMGisxdf6Pr1fvIKEdTzuhOChC38usHfJY6En6T2TSCOCOdNXNd+:J2J56WRH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8591a479cb21f85e165602702786a20_JaffaCakes118

Files

a8591a479cb21f85e165602702786a20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.gnq$ti
Size: 1KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vd1mjs
Size: - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x8v5b6
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.k0l7iv
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sf23$e
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: - Virtual size: 3.0MB

.adata
Size: - Virtual size: 464KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE