af36e8acaa6f7434c0b4d7c556979a2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af36e8acaa6f7434c0b4d7c556979a2a_JaffaCakes118
Size

595KB
MD5

af36e8acaa6f7434c0b4d7c556979a2a
SHA1

9d87d8a8209c892f177f092dbfb5bef2fc5e6067
SHA256

26172a6478d2b2d9522c05f64f1906b54d212c257e25fcc6169f2bfc9e12f6e8
SHA512

f6522ba5c33ef2be28fa7518762174b759049d73bd333bed514c0a8d4e82d48dab51e5237367b89b6b74e9fe67525454e2c0119ab81d170a57c8e3bebc9a2469
SSDEEP

12288:I5ADWhNtdwZWQmAmPef9PVGNE8AkdgZaxSr2eyW+vfmgr7f5:I52kNpQmAmIDGLjoGPeyW+vfmgh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af36e8acaa6f7434c0b4d7c556979a2a_JaffaCakes118

Files

af36e8acaa6f7434c0b4d7c556979a2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ