ac589d6d634926e2550a0a40f656d7e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac589d6d634926e2550a0a40f656d7e0_JaffaCakes118
Size

421KB
MD5

ac589d6d634926e2550a0a40f656d7e0
SHA1

b92ca6d16c321cf0acfbe7b3cd8c0cef28dbe77c
SHA256

88a3aa177a1e71a7f0e72150b5536f5dfcfba4cc15a98d56ea8a68eb7ba0aa21
SHA512

1e03d9046fae52eca2153deaa33d91cd4b58c43ef14b9b4880fe7846f4dbdf3d07430ccf58cd55e16b42ed475919a655e3e1ad3b0e363769c4229019d36838db
SSDEEP

12288:N9828tAdLkUFy8yM0DLlqxyMvuMTVh4kM:sNeLksy8ytPsyqLHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac589d6d634926e2550a0a40f656d7e0_JaffaCakes118

Files

ac589d6d634926e2550a0a40f656d7e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ