a58da235762bb178ea8201c1f0a61128_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a58da235762bb178ea8201c1f0a61128_JaffaCakes118
Size

5.2MB
MD5

a58da235762bb178ea8201c1f0a61128
SHA1

f8f9b77f8df4937cd0c29d5bc4a69cd6830e1c96
SHA256

f00aac48d2a013daea8335f476f04b5275c930ed993d9bb2e7815fa398c30e55
SHA512

10f63db5b0cbefef80c3b71500164f04a80a0a3a22a93900f92d0e958a0feda0008589251542f735bb98d1a0a9c49a4bd38e9e2fcb3506ee113a1508c297cbaa
SSDEEP

98304:0WYS0VNkUIcWBJHNWhb1oc6E2oqVhsvIrXp3KGhWbemDzEMU:qSMkUDWBJHNWAzYqYopaEKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a58da235762bb178ea8201c1f0a61128_JaffaCakes118

Files

a58da235762bb178ea8201c1f0a61128_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 445KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE