a78ae6d0bebe93d8ed9ee72adf92f1a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a78ae6d0bebe93d8ed9ee72adf92f1a3_JaffaCakes118
Size

17KB
MD5

a78ae6d0bebe93d8ed9ee72adf92f1a3
SHA1

6c9080f06d7cf7785a2db75d8ad480fbd8b3118f
SHA256

8e914783a8654814c5543e562d2633dd08b35fc2c3117adbb40874b05943a74f
SHA512

d703df17b73a74f2103e5cb509384f9db80d5c3c542bb3d1b171313bb0044f20cac242230fae2407b7501592d2f574fbe726f2cf61718d5a5e629833acf541a6
SSDEEP

192:nC4WF3Xb5sr5eHWz1u9AyXuF/X1Wr3zfbn9Ra+mzNbqmshbwbAxdu3J:03XFsr5eHB9ApL+mQhbwbsg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78ae6d0bebe93d8ed9ee72adf92f1a3_JaffaCakes118

Files

a78ae6d0bebe93d8ed9ee72adf92f1a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ