acb541186c927ee868b83125ae658cf3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acb541186c927ee868b83125ae658cf3_JaffaCakes118
Size

886KB
MD5

acb541186c927ee868b83125ae658cf3
SHA1

384b55233f1f1786ea566cb8d7db41b489299501
SHA256

6daf8ec3071795d8b490555b0bc4bf79e3a4671a096eef6b66bcfc40dcca062e
SHA512

9e49441d8b382cc420905fb3004d73d34ae45105d79a1299ef9f206149b6ced4d188780d79641c3e92b9db94d5c368c9974187c250b40d14078f8e5c16c279cd
SSDEEP

12288:7DDaqdAvjDyVyP4aw6OqF+S5OjK8epbmJoNyZwmYtaEBzBStwSTG///y/z5qzlfn:uZfAXcF+SOm1woNyEtaEBz8NTQzloih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acb541186c927ee868b83125ae658cf3_JaffaCakes118

Files

acb541186c927ee868b83125ae658cf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ