b338fa5e88206b8b93b90efb8d822d14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b338fa5e88206b8b93b90efb8d822d14_JaffaCakes118
Size

155KB
MD5

b338fa5e88206b8b93b90efb8d822d14
SHA1

b86b0cb97e02cffddf9523629e258a67711614cb
SHA256

5fbe87257738f732a61625280114251666d0624156fa056baff8b67313e752a0
SHA512

edf48cf76c6663710074380423cba59e9be0c1d93648b6dc2c3a686697439fc1e8bb0c38d0c9ada42a639788aba703641d3b6a12c7f001ab8c581636f0fb58b4
SSDEEP

3072:GJ4TFC4WWEDp77l00n1qkNOm+kwNURWcwXxBX6gsay51f:G+7OJHNOh8WKv951

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b338fa5e88206b8b93b90efb8d822d14_JaffaCakes118

Files

b338fa5e88206b8b93b90efb8d822d14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ