c02546c49e25780dcdb165e0f69423c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c02546c49e25780dcdb165e0f69423c1_JaffaCakes118
Size

462KB
MD5

c02546c49e25780dcdb165e0f69423c1
SHA1

daee05072727b4cdd9d63567a3e498e81c206301
SHA256

436641df5009ebf08cf39e0f7b707ca5eaa566296edae4449434759a7f4ad60b
SHA512

55626957ebd54862d1e0a01436f194b37388811b902aa3c753d22ea6fa727783dab5106a38a61c731790eca02449684d243b8304ca977c4d958ab219286001ab
SSDEEP

6144:qf87xtcafW8N5+/KAOwkC87FPloon62NB7oZSzNuTOMbZ8B1T2rcv3QPEi6xEhHC:qf87xOafWGq3j22C8WTU7H6xiTZH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c02546c49e25780dcdb165e0f69423c1_JaffaCakes118

Files

c02546c49e25780dcdb165e0f69423c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 492KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ