aa1f279a6dfaebc5afebb056e8436d87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1f279a6dfaebc5afebb056e8436d87_JaffaCakes118
Size

363KB
MD5

aa1f279a6dfaebc5afebb056e8436d87
SHA1

ad57bb7d78329ea47b68a334d69870f6698b263d
SHA256

30a2c647ae3da08739c3ad0655281d6582bcd3c3f1697979b341e676436fc367
SHA512

10ffa71d055f1390ccfa3e9cea7825a8af07c26f59dcd63d951226072cc5ab5d73a916f73d9ebe7ed81783c88ddcf394ab5ed46c403bea5b4aaf106da0e77f97
SSDEEP

6144:nC39zhC+DefYqGVumq19UsItSKHydIeVEQuZX8AjhXCJAMlt7:na9zhC+FFSRjuZXxhS3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1f279a6dfaebc5afebb056e8436d87_JaffaCakes118

Files

aa1f279a6dfaebc5afebb056e8436d87_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ