ad4ee8858f2a89dc4d5f9bbb0e6fd00f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4ee8858f2a89dc4d5f9bbb0e6fd00f_JaffaCakes118
Size

612KB
MD5

ad4ee8858f2a89dc4d5f9bbb0e6fd00f
SHA1

3b7ddf8ad277a849b0502e0336051aae63009a68
SHA256

b279adb67feaa39aa8b35083463ad18b711a36c6e126d8d9de0c8efc086f417e
SHA512

b2fdb07741bbab07cd9dc813bb7eb672cf9ef35da95d86ccf706f7b2c416018e562aa3d6a118ed118354b9d0196a15ee9b90fe6e4abe31a04fdecb096c670a8d
SSDEEP

12288:wynf3DDQQ/KjYi2WzlzQUlsQgCNzsceSVc0rZbJz:wyf4QSjY4R8Uls8ptZbJz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4ee8858f2a89dc4d5f9bbb0e6fd00f_JaffaCakes118

Files

ad4ee8858f2a89dc4d5f9bbb0e6fd00f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ