a637e3bb5486f7e6580be75d09a7bac0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a637e3bb5486f7e6580be75d09a7bac0_JaffaCakes118
Size

191KB
MD5

a637e3bb5486f7e6580be75d09a7bac0
SHA1

0e33becdbbbc08a26e0737468d0a0020f3378a03
SHA256

fff8cf48a8e85719218cdb1031e94fbf30466a72088d99e8558f8f239fa6b72c
SHA512

39de0638a82d3744941e8eecbc5eee01a08f8178504f290668e34fab522cf4a37d0c837b7b288ccc33ca5925d42dbbcf22384d7eb48bac82650ec8f24d6f35db
SSDEEP

3072:L+kc+A0sGkDoweZ9tQH7uKEku/5XbDXjjZTmMuVeYQkZwUhf5Y4FYD8TB81YDB:eCxVipu/ZvXjlKCYQkZFhf5fdThl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a637e3bb5486f7e6580be75d09a7bac0_JaffaCakes118

Files

a637e3bb5486f7e6580be75d09a7bac0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ