ad024c9f82a650b2692d277f82002f80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad024c9f82a650b2692d277f82002f80_JaffaCakes118
Size

599KB
MD5

ad024c9f82a650b2692d277f82002f80
SHA1

b6e9cb9ca4dc937332a7c8c3fa4fcb06b5d9465e
SHA256

92fbb3c071ef0df4f518888f19c1b97f02472518b1585b326fa2e34833ee8808
SHA512

74bc3b8067067f097f9f71a5cad480471cb251cc8e01928d0b99948bacb174345b806fcfe53dee74d867b3b5d047c3ffa599d5b27e207599da25eea97e963297
SSDEEP

12288:6jC1HjVtU9h8YmZrzKuPE2cjWv0hr2V5DhykztdE:6yDVt/h/JsYsU3hy6ty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad024c9f82a650b2692d277f82002f80_JaffaCakes118

Files

ad024c9f82a650b2692d277f82002f80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ