b21ea8e69ce71c23a0daa81a12a74050_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b21ea8e69ce71c23a0daa81a12a74050_JaffaCakes118
Size

476KB
MD5

b21ea8e69ce71c23a0daa81a12a74050
SHA1

6f36c565176318c67b0e9b853c28f120bae4effe
SHA256

58054bf13f87789e1eeaf9d47be70d1422cb627f5306f8ebb0173140b6e308eb
SHA512

b02f400e0b5fd1f4fdba6792e23aca378bd1c71b917edebcc8e030adb12d3658200e79636fd9c3ec9b783cad9d389d45429a99fa3a64d40ee8e496c14e501c9c
SSDEEP

6144:NWKTWL37kKKb4jly3b+koaP0CwF1umNp9ZL7+g5LypKN/naEDvJSlH4vUY85Ma+Z:sL3AsjgAEUZHzPBnpdSleP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b21ea8e69ce71c23a0daa81a12a74050_JaffaCakes118

Files

b21ea8e69ce71c23a0daa81a12a74050_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 410KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ