b50b46ab225da8ba7eeb934bfcbe7390_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b50b46ab225da8ba7eeb934bfcbe7390_JaffaCakes118
Size

1.5MB
MD5

b50b46ab225da8ba7eeb934bfcbe7390
SHA1

00c68d1b1aa655dfd5bb693c13cdda9dbd34c638
SHA256

d6672c2d47218c2cabba5ba8a4623d9be16fafa91bd14b7a4dfda38032621cbe
SHA512

3621ff2716c64e02a21747e0936c297fef35b9c379ec1ac1de22fae814c801dd988032cf9202537bf05ca81b957f0cd1e4ea011e235b88b8a49ec8f13acc774c
SSDEEP

24576:ftvST6vE3RMlEYPoprnbLVfCHwI/fpN+Qz/n0QZ:FST6vEYPKLVfC/HpkQz/n0Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b50b46ab225da8ba7eeb934bfcbe7390_JaffaCakes118

Files

b50b46ab225da8ba7eeb934bfcbe7390_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ