ab031e75ce1291356cfab05e37b2f5e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab031e75ce1291356cfab05e37b2f5e2_JaffaCakes118
Size

756KB
MD5

ab031e75ce1291356cfab05e37b2f5e2
SHA1

0a6d5744689c925e8328bf678109a8712e58b3da
SHA256

d7b24c346427f4011c4e14c51bb283510bf88011639c67b31b0ab3a89d80c94c
SHA512

24725763b394304895fc751222ee3b9d6c46bc978e822fa23ed6c02e5062db1b879c2d9ced7426e0abacf94981201cfc04a33dc9ff3bd56f389885803150b28b
SSDEEP

12288:jZfukuBecSegHwPkTKEYc6Hr5+ZXrIm7yYlQFCkBcbTn7777779:jZGZZdPkeEYPr56MYyAvgGh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab031e75ce1291356cfab05e37b2f5e2_JaffaCakes118

Files

ab031e75ce1291356cfab05e37b2f5e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ