b894c92e51996e6939638951838b8478_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b894c92e51996e6939638951838b8478_JaffaCakes118
Size

160KB
MD5

b894c92e51996e6939638951838b8478
SHA1

3603a5b54c9a15c2b6e4f9ee03113284e326ab92
SHA256

5b9138a6a23d78458147147eca5487387ac19bb3675f26cddccb272403a9d293
SHA512

19fae3030d69248b5c3ba3be8c9376ec669074cdd1b2a65959bbe47674fd586f425057fb68392b2ec34d6baaeae2ce2c3d5ca48a407ac2832e09aa218d077a3b
SSDEEP

3072:VauNs+w+EAYjcviYYo7DEFvzoMul+slsmxnFmvoUPusdgMWOfbZc:cuGqLYjDYGFNyswHwz/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b894c92e51996e6939638951838b8478_JaffaCakes118

Files

b894c92e51996e6939638951838b8478_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ