a59b8ac39f4304a2e7c7880262ba0ba3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59b8ac39f4304a2e7c7880262ba0ba3_JaffaCakes118
Size

510KB
MD5

a59b8ac39f4304a2e7c7880262ba0ba3
SHA1

413b9e20871422f9a3e31daa16236c015036b9b9
SHA256

8d6b15602acef8fbaca7dd4a79baa9521c786c9f66c1cf93c9ca46e0de5bad5d
SHA512

48f0329b7277a5d0f3f47d250337be83f3db50a302a71566d8d35739f8a503f0ae3647a17802a1a92f491349ea3d59ab7b39e22d9f59dc1907ba28ac82dde030
SSDEEP

6144:JJL+bLW2TyBOzQ5uA8OeD7KctAQ0mbWjpl5XkmD9+BMUj9jGZYfzm8XF4955Pe/+:WWkHA8J7KiPbIZDbusZYbegUT44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59b8ac39f4304a2e7c7880262ba0ba3_JaffaCakes118

Files

a59b8ac39f4304a2e7c7880262ba0ba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 819B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ