abd5e9a0d1b1caccc62534a87b0deec8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abd5e9a0d1b1caccc62534a87b0deec8_JaffaCakes118
Size

460KB
MD5

abd5e9a0d1b1caccc62534a87b0deec8
SHA1

0529116c7e3d5cbfa94fffdfec3840ef59559976
SHA256

47db051d7774acad7c89a24556c2e4a7ef86aee9311ab0a155382d332e8a54aa
SHA512

426d571d0166048cb9528cbfe761a6bc0d0f39c9b695cc6345f90f3e94f13e542091adf2b7bce58178f366afbda5d4b6d16a00c4cea37fb07fdfc446c4c1036b
SSDEEP

6144:O6Cv/NC1pjqgs9zoJ7mIdWuJ7skxtYLzKB7X5yxIeiulQ:/Cv/spjvvEYWuvYnKJsiEQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abd5e9a0d1b1caccc62534a87b0deec8_JaffaCakes118

Files

abd5e9a0d1b1caccc62534a87b0deec8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ