aaa33a03b4cdf52d96c74fce3f1906e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaa33a03b4cdf52d96c74fce3f1906e4_JaffaCakes118
Size

404KB
MD5

aaa33a03b4cdf52d96c74fce3f1906e4
SHA1

5b256fa69069240c3ef8e63324786cda33279aa2
SHA256

2d6e1278266ffaf5b35e98f490cd6ef3554c73dcc16ad43b2d59fc64d5551640
SHA512

f726750e088a83a14dd13806f002b051c0acca7f5db66006027add80f3001bf399665da0b16f1bb0ce5141789005a890b3177fb90fe8f6dd5f80f07db739628a
SSDEEP

6144:CJY4EBS6HpGrkYBSyJFyXNlNRvPoqLvNbn8/oD8LS5VsHyr/4blxmDU:v4EBS6HsYYkJTNR1V8YkSr/e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa33a03b4cdf52d96c74fce3f1906e4_JaffaCakes118

Files

aaa33a03b4cdf52d96c74fce3f1906e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 470KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ