b12e0b4075e4b4b2cb2c8552569f8211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b12e0b4075e4b4b2cb2c8552569f8211_JaffaCakes118
Size

596KB
MD5

b12e0b4075e4b4b2cb2c8552569f8211
SHA1

473fb0abf81d9672118ad7ed042349a46ad25bfc
SHA256

58b96689da14be2bc50c255eea394c1840914d70271a342d4d1b547b13911c44
SHA512

7a5aa3f1546776506c93e38f09f5c433fa3d5fed3073c53446844da4e28a104bd155f61d8256114ce95a897c611aa5afbfa4734964e7a38baef7d9e2213e2190
SSDEEP

12288:KVsclyUDInCATy9HSonTxOXKqM1MVMQOxpuCkWfr5e2sk02kxsl:KSclxNSQTxOXKfRXuCk61etk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b12e0b4075e4b4b2cb2c8552569f8211_JaffaCakes118

Files

b12e0b4075e4b4b2cb2c8552569f8211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 4KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 597.0MB

.elahrk
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ