b21f49bce40b245cbcf4f5c608a10cd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b21f49bce40b245cbcf4f5c608a10cd2_JaffaCakes118
Size

527KB
MD5

b21f49bce40b245cbcf4f5c608a10cd2
SHA1

875c36d2ef06296e69f91f15898b53dcf612eca3
SHA256

c1d62e9bb3cce3ba8da374c0e02cde8307403c43552bb70ebbd8828e94fdddd4
SHA512

c312ec900ef833c6060d0704ba8b8b442978002c7ad7756e2c98c609e88caa8e0e9da7e496cdcede01f306a9a11f9aa77d58dfd3513cc63ea758ffc89c4dfbcc
SSDEEP

1536:uJga4QvgE3/6IZslcz8E8B8q818j878J+818z8s8a8o8O8i828E8B8q818j8X8yT:N9QvgEiIZsyXrYShWvhtxM8G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b21f49bce40b245cbcf4f5c608a10cd2_JaffaCakes118

Files

b21f49bce40b245cbcf4f5c608a10cd2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 42KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.74M__
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CORE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ