afbeeb0bffde4e2f44ebc53e12018266_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afbeeb0bffde4e2f44ebc53e12018266_JaffaCakes118
Size

749KB
MD5

afbeeb0bffde4e2f44ebc53e12018266
SHA1

61bd97e77e03f26d7657bbcbd9fa6fd245be89a0
SHA256

7221e38a9480a725f56c1fafd512162e72007e7eb90734e248a56b2373ded593
SHA512

5357ca1eee165cc9e1e4c4ec5bd0bd1cdb07e906e40ba6ec93f42387902f9ed63973a5689d8fc1a750cb4f6babed956ba89030155255d243ce23616fda69327b
SSDEEP

12288:f3saWHByz67e1kDsfmjnzZQ9EyuRTa2lxTKixhYlearK:fx8ym74OzOqRCiF8K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afbeeb0bffde4e2f44ebc53e12018266_JaffaCakes118

Files

afbeeb0bffde4e2f44ebc53e12018266_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ