b7a7627ef99029a4bb8db98b95ad6c75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7a7627ef99029a4bb8db98b95ad6c75_JaffaCakes118
Size

621KB
MD5

b7a7627ef99029a4bb8db98b95ad6c75
SHA1

f66af8d2ddf005cc950e07c23d2a58fef2131db7
SHA256

058f3d34b512a3c1a3f04321c4244dfb273dbb964f17f5aac0c4743b4b77ee12
SHA512

51bb6d71cdda74919f981be91b84bb0802ac2217ed3dacd5126062e257f866c212dc0b05bd0f21ee547603ab4c75058d5c62ea36560b041a1a4b5122f66f6713
SSDEEP

12288:MfDUaUGQzyniCJ4+FjSGebCqWKdECFPt7:Mr2SiCOSS5b8Kd/dd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a7627ef99029a4bb8db98b95ad6c75_JaffaCakes118

Files

b7a7627ef99029a4bb8db98b95ad6c75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ