afa82395652b42f55d1fee60a1621fcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afa82395652b42f55d1fee60a1621fcf_JaffaCakes118
Size

3.9MB
MD5

afa82395652b42f55d1fee60a1621fcf
SHA1

3b2f0887bf386feab3d7e77d0acab9778e0dd89a
SHA256

d23c5bcbfae49e6fb306a1549fbc9067254934a3577f2d01dbef58e0d57b7a5f
SHA512

6699153a3477a8b8b8c5ee057905573b0a3e9290d036d700aca940014188e81c0f32769d0ea861aafc1b195cf769829d4416efd5f295274659569b0ad5a4040c
SSDEEP

98304:3sZFQz1mwiSkhvJRuvXGjsCbW43Ktdd++ebqm6EQBfv8usp0Z:cwXiSSu+ZK4qdsx2lrBfv8uss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afa82395652b42f55d1fee60a1621fcf_JaffaCakes118

Files

afa82395652b42f55d1fee60a1621fcf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ