b747889d5e3e820d7910263aa2698a24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b747889d5e3e820d7910263aa2698a24_JaffaCakes118
Size

103KB
MD5

b747889d5e3e820d7910263aa2698a24
SHA1

7a2fba67f9d794549f0e77a7a104781f2014ed3f
SHA256

dd5db75cedd9443d890379e0426278b7dda0c58347a8f6538d5386e691c1c211
SHA512

aafb42d086d38a01a9556d184eac61bb3ae5fcb21a9866c079fe446c8547340042514d008e9c4bc165345a21a4c1c8da48e3e05deb7d1e7b20240142bb528b21
SSDEEP

1536:NXq1XQ8eVIwKozMmzzKnw88gVVShUQSZgVCSNKFXKJvufMuMtIU4HjZpNgDr91ih:aX/eVIwwYKnugVVeUQegrNsXKlDuMqh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b747889d5e3e820d7910263aa2698a24_JaffaCakes118

Files

b747889d5e3e820d7910263aa2698a24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ