ae89e88e988c09e883fa2eced3196282_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae89e88e988c09e883fa2eced3196282_JaffaCakes118
Size

540KB
MD5

ae89e88e988c09e883fa2eced3196282
SHA1

10d75dfc09c4b73db0c94e75b0034eda4543a6ae
SHA256

c9083e892f48dda13dbb4dc3e6a83e5a7b75128d6edbae97d9b3caf95c9115a9
SHA512

6fe9c16626483adc3fc989f4eca6d548e7f6f54350ad4f710681e3dbb42ea09a47a9296549a808f4c6dc07938bb3b40a94bc299223e23fe0551b7b3f65d185c5
SSDEEP

6144:tsYlu5LkjSA821I+ZXtlnbDa33RfZIKu8XDbNgdwsmZyH0NKfX9GWeQNaPGXDCDF:yYlu52SX2qOqxIKmwnybf9GWelOTCD5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae89e88e988c09e883fa2eced3196282_JaffaCakes118

Files

ae89e88e988c09e883fa2eced3196282_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ