a79fc4934d88f783121d7cae598f4637_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a79fc4934d88f783121d7cae598f4637_JaffaCakes118
Size

920KB
MD5

a79fc4934d88f783121d7cae598f4637
SHA1

c2a7c791349c2b618dd102547a2afa90dc5307c2
SHA256

eebbb5772f10eabc6b32a1db8d02d979000dd030d75cde518f318e263e857da4
SHA512

f0f426b30e47e56fc6a44dbdeed83f3375d3d931956ac946b02fcc414ca0a7d25ccf65336d41dc00c7e31c667d94c9f57635d771d12bb0143ae3b5581581c933
SSDEEP

12288:Ag+SV97lZcNX7i/HXX3Ch0OI4m0ZgJDeiadICmH7ghneTGI5/kXpRR8FaKc4:AzM9wN+/H3G0zcOeLdGgBeTGI1g/Ua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79fc4934d88f783121d7cae598f4637_JaffaCakes118

Files

a79fc4934d88f783121d7cae598f4637_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 697KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ