b886038d58900f68cc4368797a2de4a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b886038d58900f68cc4368797a2de4a5_JaffaCakes118
Size

393KB
MD5

b886038d58900f68cc4368797a2de4a5
SHA1

45b8c33dd306ebd740126f809afa77ad529b78ad
SHA256

2948e3c37d6c0bcf42ea9ec16ceba2c7af73c3d9fbf83dd745da26718cae72e8
SHA512

f320bc4d5714a12ffe60a07c1e6c4bb81be4b8468ff0daa2402d6e0973eb129b050493443680841778024b584874167a6f3bd2d1c63cced05c4b6a011c5b25a1
SSDEEP

6144:3SonrG2rJNq+0gSwbNWFoaQepGC7MjVCv54lVOUJsmfaGNkVOaVPVzeRHlM:JnrG29Nq+NNrjVS0xJs/VLPViRFM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b886038d58900f68cc4368797a2de4a5_JaffaCakes118

Files

b886038d58900f68cc4368797a2de4a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ