ad3258952695bd92e9f033dfd1955991_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad3258952695bd92e9f033dfd1955991_JaffaCakes118
Size

743KB
MD5

ad3258952695bd92e9f033dfd1955991
SHA1

d0dac7b4171087f6468d14eb572a8f18fc84facd
SHA256

da69251ef5de4bc22b44fcc29ae5d79fa167135a5366dee19c1a8756891ca702
SHA512

9de389a8a745e67b9f035d734b80a3c3e4ec00f2cf57f7089714b603954ff180e83aa690875e16298214779fb4189e1be92ae0544b5f484c26457dabc9734200
SSDEEP

12288:tRn8S++U4u/n/80dW5A0zyo6JwQ5oAlK+GP8vZ5IkeQQQ52LYRg08yPwDR/A:X8MU4ufxdW5A2mJr/kN8vvIkee3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad3258952695bd92e9f033dfd1955991_JaffaCakes118

Files

ad3258952695bd92e9f033dfd1955991_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ