a6afd3a254ed55807bfbe5b4b655af25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6afd3a254ed55807bfbe5b4b655af25_JaffaCakes118
Size

1003KB
MD5

a6afd3a254ed55807bfbe5b4b655af25
SHA1

9fa3ca92b120551c6191aa57ea8723de7b747e01
SHA256

3b0c312945896bdb8fbb8be69478085c6f1be0d5ff0be334408e4dd609b0e8c9
SHA512

db1fa1978dc49ae709e8feaec0dffb9853d048e780b60e342ddd67bb936dd8b4854c49579b649711454107d3b0ec47879229c953fff75b1433ab1c44b0ad2b3a
SSDEEP

24576:pq/Ecbh/mbftsx/NR9FRzybwmUSdhGbN:pqusZ3pURU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6afd3a254ed55807bfbe5b4b655af25_JaffaCakes118

Files

a6afd3a254ed55807bfbe5b4b655af25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 682KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ