a817e068ef96dca0b74942de8fdddeab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a817e068ef96dca0b74942de8fdddeab_JaffaCakes118
Size

586KB
MD5

a817e068ef96dca0b74942de8fdddeab
SHA1

5d563e7b0d563a1995465970ed77ff7d5265cdf9
SHA256

bae4abbc6079c616ff3920cde131820bf81559c28bbc86c0fc534b4e4e1d3304
SHA512

a9627bb4f216d062c9b44b673f1bbf8f9090efd8cf9dcdda30bf6ed824c6d42f828786af352b02a394b13ce78f2eae1a36f1163ffd34aa3d1d91619d676a4cb5
SSDEEP

12288:eQweqMpYX8j+VFR7+aTB6bnfmuAgqJvKRZTCYsWi+duCU:pRp2VvFMbIhKRxCGi4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a817e068ef96dca0b74942de8fdddeab_JaffaCakes118

Files

a817e068ef96dca0b74942de8fdddeab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 839.0MB

.vbsihn
Size: 548KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ