af536fbc41455c8cb97b3e6e5c0ed73c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af536fbc41455c8cb97b3e6e5c0ed73c_JaffaCakes118
Size

743KB
MD5

af536fbc41455c8cb97b3e6e5c0ed73c
SHA1

dc367f732d4fc15c9068a8c78b4c169788369b18
SHA256

ba7a337d775c214710070b6284b825747934970c9463aebb0d69a021c499f637
SHA512

82f0c1e61ff4d5d41c8eda095b48ccb01e174168e3568077583fee92b85c69ff9eb5d3fdb97240420d60f485ab49ac5253ced52c3941f7f9b6765ad13670838a
SSDEEP

12288:tRn8S++U4u/n/80dW5A0zyo6JwQ5oAlK+GPHvZuIkB7QQ52LYRg08yPwDRUg:X8MU4ufxdW5A2mJr/kNHvcIkBX3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af536fbc41455c8cb97b3e6e5c0ed73c_JaffaCakes118

Files

af536fbc41455c8cb97b3e6e5c0ed73c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ