a79a804be125cc2e9b7e42b7b5e3387e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a79a804be125cc2e9b7e42b7b5e3387e_JaffaCakes118
Size

322KB
MD5

a79a804be125cc2e9b7e42b7b5e3387e
SHA1

828f6c088d556e22ec5df759407a449c48424702
SHA256

53822f115f3fdd3e73ba40ff711871633c41e9cc61693ee395f964821e3f01df
SHA512

dffb883f440791cedc863c57d90e6af39b358306bd69656b6cd5427acd0c18e9a065d1794306fd7da0fc623fe89c24d8f4fb07e550e3116562160d223d015733
SSDEEP

6144:lKMwaMP16BzAT3wm05W3Vbh47lL4x+EwqtqkMt1e6fRdK/:lKMwFCzATGUlbaRK+EJ9MS6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79a804be125cc2e9b7e42b7b5e3387e_JaffaCakes118

Files

a79a804be125cc2e9b7e42b7b5e3387e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 303B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ