b7a3fb5320f754f692d84e97060e91a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7a3fb5320f754f692d84e97060e91a5_JaffaCakes118
Size

492KB
MD5

b7a3fb5320f754f692d84e97060e91a5
SHA1

b3697847576a91504e6d0e400e16e91958af2da0
SHA256

b9cab5f0b5b46816bd17cc6197c9f9580383c6fc0902c4a0440c1468ec2f48cb
SHA512

f8f6c84407e9bfff512c5ba8e8dc184bf854ae7b64bbaf3e128542fe7dccfc97d1dd33c2bbb21dd039a5302366d5c5c0a13ed98180caa6beadabf323f7a855e2
SSDEEP

6144:W1mjquuEtPvQTmEhbsWypjXMlczJ6wliYq7H8B7smuXQo2Pz37CE6R+KyOCzJk:EmjquusEzStWcN/liM74XQt4t9Cm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a3fb5320f754f692d84e97060e91a5_JaffaCakes118

Files

b7a3fb5320f754f692d84e97060e91a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ