a827c8c965d7a4092e162bca3e151a10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a827c8c965d7a4092e162bca3e151a10_JaffaCakes118
Size

3.1MB
MD5

a827c8c965d7a4092e162bca3e151a10
SHA1

66734e6114d31adf7cffeff3f8577e4b2d0b84d8
SHA256

f03f02ef6b13946d01401dbb16fc404cac8d119e2d86be2e78556037d7f32745
SHA512

3c6b8d689d1dc6db14fd9d22ef2b97b60ef366528c556cd1e6c07f60e99936123e5a220663163116dc8ff6b72bcef87333b94c46cd61952811e7906d5bd20ce7
SSDEEP

49152:wWy+ov+ECSjtlmAfaqHMjXgovv53Rt+k6rXvJggsedjTpyFRK0aOQTRaEPbmQk:wWz49jsjXjvv5j+kACgsyiKnTw/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a827c8c965d7a4092e162bca3e151a10_JaffaCakes118

Files

a827c8c965d7a4092e162bca3e151a10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 273B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ