a7858f7f4380e77eb60a5efac6f72c85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7858f7f4380e77eb60a5efac6f72c85_JaffaCakes118
Size

55KB
MD5

a7858f7f4380e77eb60a5efac6f72c85
SHA1

0f7333f06d291a029c3e09091a42828109071679
SHA256

1adc5e73519e3bf688cdd819364fbc0cf533cbc3b12f1bc7dbda9feaa68250ad
SHA512

733acf5a915a31e9c62b9c1b7b06507bc6bd0a243bb182647995a4c6c32e37f718b89c4f85fca79295e9eabbc2bbf14db346d52f6f0f5c57004607280a4c60bb
SSDEEP

768:uqtcRuwHU7cBO9y6qrI4+9RZOvNghcvTzfnhDl07Qz6YRheD4otuph+2ext1Tdrp:zoXO9yFrILMLhgYRGcph+rt5dJLYNql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7858f7f4380e77eb60a5efac6f72c85_JaffaCakes118

Files

a7858f7f4380e77eb60a5efac6f72c85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ