a97256d8ad2c2d2a02b4f5986813a656_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a97256d8ad2c2d2a02b4f5986813a656_JaffaCakes118
Size

150KB
MD5

a97256d8ad2c2d2a02b4f5986813a656
SHA1

c6343145a251b73326ca0bcaacf801aae23a17c7
SHA256

6e77b72c3d7543c3ba196cc280e0f9e2034c773d49f2cdc6531b28720789c2df
SHA512

de74d09c89247f9ccd52d62596c5a9e28c05290015216a5fdfb42d3ab7d55d9010ac50a9a82cb137cfa1a9941bbfc50d3d41a2fc4bb6f2a5ae990d3d8a730158
SSDEEP

3072:f89ts3lAn3cz8VMt5cRDmNlQwKOzoaqTmY6A5:fHGnsz8MtSGRxwyG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a97256d8ad2c2d2a02b4f5986813a656_JaffaCakes118

Files

a97256d8ad2c2d2a02b4f5986813a656_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

SCRYPT
Size: 77B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ