af95744f8dd6e8e78b286c7298bf75cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af95744f8dd6e8e78b286c7298bf75cf_JaffaCakes118
Size

512KB
MD5

af95744f8dd6e8e78b286c7298bf75cf
SHA1

b74a26ab2a6ba22483f13ccdf79fe658dd806e54
SHA256

35a6e007fce433723f08c6b1e4ee744bd18b830b78e61980290fb9b7bde85cb7
SHA512

89f1604f0ea5e4068c20bd8b7682b3357854058c555b329fd55eda647fed2b986c38a11b462fff83f2194881644d9f8dc580c2996f7d5ce1cb8480d23095ba0c
SSDEEP

12288:0tG4mJHv+G5AdJURkJz5xXruxwsv+kSvyrHn:zXJB5Ac+7yLvyyrH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af95744f8dd6e8e78b286c7298bf75cf_JaffaCakes118

Files

af95744f8dd6e8e78b286c7298bf75cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ