b72616ca1ddad64613876d3cfab7e0f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b72616ca1ddad64613876d3cfab7e0f2_JaffaCakes118
Size

513KB
MD5

b72616ca1ddad64613876d3cfab7e0f2
SHA1

d323a54cae18f1a4525d5f99bdadf2dc8f10f68b
SHA256

131eca1bd38f3941be88821d8af819fe0ecfe34bb442c355b16e05e3de8983c5
SHA512

d1b07f3b154fe8963ea763503f8ac25f3e27e6e7498656cb27642d891874f058f8c78d222e218b930c06d8c7651f77d07ca5b5b44254fea1f03fc3e171120c8a
SSDEEP

6144:N+IBKARQ0EGUUR/iy8wlrT42C+dpEk9HyUCw7g6L3IXRI2I3X/ivx/ecHryaMrKx:4IMEQ4HRahXkPFLYXRg/G9ryNmOjry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b72616ca1ddad64613876d3cfab7e0f2_JaffaCakes118

Files

b72616ca1ddad64613876d3cfab7e0f2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 439KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ