b7dd8a40f622f4b00becf1295f886210_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7dd8a40f622f4b00becf1295f886210_JaffaCakes118
Size

631KB
MD5

b7dd8a40f622f4b00becf1295f886210
SHA1

6527dc49c2ffa8ea0f27047055997bd537ea092d
SHA256

2b4cc7ffac10d839df9278b123caaf3ca24e746a35a822d6ab7c0c9beb648463
SHA512

a72378870169af2091cede10b1941ac4d40a6288b6f0ca6f84f3bcf23ba53c85aa5f9d1c979f37dc1e7ac7170c50c97485b0e35bb2847c811ac7b464cbf2d7b1
SSDEEP

6144:S6ASd4LeFyo7Y+OcZklufFNR7O2Vp36zUIYxwrAAQ+meynXloXWN8RQgXl:0Sd4L0yo7BuOFD7rgzUOcAQbvXaHRdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7dd8a40f622f4b00becf1295f886210_JaffaCakes118

Files

b7dd8a40f622f4b00becf1295f886210_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 202KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

acvthjw
Size: 84KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE