b97a891b405e5cd7ff075cad029d3201_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97a891b405e5cd7ff075cad029d3201_JaffaCakes118
Size

1.1MB
MD5

b97a891b405e5cd7ff075cad029d3201
SHA1

623f3519da36fb8bfd5dc99a099144a44b6f9470
SHA256

17cb55477203bca8e80b669b1a2b5903dc2d234d717aec1a2cbd99556c0d77d9
SHA512

dc7df6652dace3c4127ccba98fd6b6da12aabb82f3e06132273d50ed849825374cef0ace108d2c567841badf901c6d0604b5885a171c81be9f5dca60775d6a09
SSDEEP

24576:GWjtJZZwCY9FwkGHHMisoxHyIGUiHIBXIPnPbl:DmTwkGnMxoxSIiHNb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97a891b405e5cd7ff075cad029d3201_JaffaCakes118

Files

b97a891b405e5cd7ff075cad029d3201_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE