a71b492b5f940fa9c4c5c15db7e15529_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a71b492b5f940fa9c4c5c15db7e15529_JaffaCakes118
Size

525KB
MD5

a71b492b5f940fa9c4c5c15db7e15529
SHA1

da61a573f5527c4e2d3e6a7479068bfe8dc04013
SHA256

1d42df0cd0d64b423acd0d47ea7b7b06bf5ac652580ef52c85ff72e130e62757
SHA512

7f67b677df086123ecc922f6d143efeeb8aaeae19f2279aba794bc349d9ea586f9302a69e268df86330603bcfabe718bc3a6513b4f9d025a14c0ab31a6e518fd
SSDEEP

12288:lPxl2QM23xbRGbBh02Ylns1BRz29cEq0fQH/9VkDosp:tjM23xsLYlsZz26YfWvkDo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a71b492b5f940fa9c4c5c15db7e15529_JaffaCakes118

Files

a71b492b5f940fa9c4c5c15db7e15529_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ