b13185f7dfbbf29a53499004c9551928_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b13185f7dfbbf29a53499004c9551928_JaffaCakes118
Size

587KB
MD5

b13185f7dfbbf29a53499004c9551928
SHA1

6ea52e2e9f9aba209b56b795d676ca5656d5e69e
SHA256

a145b502a103cd0ea3c98d6c3748162d0951c8fb7045cdbd5d5423def3d80caf
SHA512

0d1677b660e68017cffc5b204abe0b6690bc6e34d254d19ad5e4dc25c05ad3d2f28fcafe405cfdfdcc13acdadf7a0d97b40005a885a8657e7a5c0d8e725d6ffc
SSDEEP

12288:85UDehR1kwZ+8uAmLa7xPZGV88ogxQCpMiG03brCvfiQ:8568RE8uAmsLGTzvW03vCvfi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13185f7dfbbf29a53499004c9551928_JaffaCakes118

Files

b13185f7dfbbf29a53499004c9551928_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ