b167de4c89e22f334965bbadcd97af63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b167de4c89e22f334965bbadcd97af63_JaffaCakes118
Size

34KB
MD5

b167de4c89e22f334965bbadcd97af63
SHA1

1c81b341c285898b714646dacf6a61eb708c6898
SHA256

b4c6298b9603c1b1e8a40ae9af593b7de202161b153c1b99eea14374a297c1bb
SHA512

e2ff8e335ef337075b351f8744b39cf8d935b2785b5546b135c62053f155beed3de1c8d43fdf8394e942bc40fa7c482fb745524deec1e732ef62147dbfaea477
SSDEEP

384:acHJVX+V1RZtzdM93zT0/C4haUJSMTjScJS/DswcA2wmnHTzKmjBq7uxCL5XgG4x:acby/ZtZMRKha9D/YVRTzZjBmuxXGd8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b167de4c89e22f334965bbadcd97af63_JaffaCakes118

Files

b167de4c89e22f334965bbadcd97af63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 793B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ