b910eee89bf49bb9601ecbcba9aba96a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b910eee89bf49bb9601ecbcba9aba96a_JaffaCakes118
Size

14.0MB
MD5

b910eee89bf49bb9601ecbcba9aba96a
SHA1

ce9116aae8325f713989cb843d19c6bd41e558ea
SHA256

1341daff486565726fb100d76abbae6c025b2ba69bf7b3ff478a7f7489195639
SHA512

5691e9a01e4d05e0d1aca4db8cd1cbd25a8d62b0ce366cd5d71368a7978712bddec75bb00e62e0d8106e851b6f24bbd72d12bc5effc283961abddd55261e1839
SSDEEP

196608:sRY+WqmMvk3PI5oVduxcM59kxG5GP8OeFb5IVsZ:s85Mv8PIoVIxhkx9P8y4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b910eee89bf49bb9601ecbcba9aba96a_JaffaCakes118

Files

b910eee89bf49bb9601ecbcba9aba96a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

DATA
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ