aa889bbf4f8597c453203e29d8574792_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa889bbf4f8597c453203e29d8574792_JaffaCakes118
Size

214KB
MD5

aa889bbf4f8597c453203e29d8574792
SHA1

964519492d59168d6f3e2ae5c3616c94a447464a
SHA256

5541766c320044c6d162646f423ef78e41f645252afcba192c981d1093947f93
SHA512

3983ec22b200a4b31639a2fa74d770331d1ae46ed2552ea7561547b7cc444d452768c614e19760295471263612c89df7066c8eb842d8406cec436be5593a7a53
SSDEEP

6144:/l0iNIEmmmFnRsUtZSK+jp3bPW+Ju2MRbEah5MZ9zlx:t0iNIfPnep3bPJ+RTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa889bbf4f8597c453203e29d8574792_JaffaCakes118

Files

aa889bbf4f8597c453203e29d8574792_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 97KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE