a886d31a61f882a704dcc3378c441160_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a886d31a61f882a704dcc3378c441160_JaffaCakes118
Size

481KB
MD5

a886d31a61f882a704dcc3378c441160
SHA1

42265e0e9991060abc9127bbcf9967f2c32e6be1
SHA256

cc9152923a6f4f635c57989ffc337b7f3348ad50988cc6864a394540b2353baf
SHA512

4e1c00b9fbbe8145ad20a6b727812f52a9e5a1e4e916ab40420b92c0aa6525fa8682bb53a8e3a806d77e41c83794cb5ebad8b920005cf2672b2c6307cb099996
SSDEEP

6144:Df+Ke75/wwD7qO6p/NWerfLtvSntBChhopiTeooaVBx//dxlbGveUhoAIgjOaxhX:yKi5/9D7qO6tpKntADqobq8AnvGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a886d31a61f882a704dcc3378c441160_JaffaCakes118

Files

a886d31a61f882a704dcc3378c441160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ