c02900f126f72b61fd5f91332c8323a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c02900f126f72b61fd5f91332c8323a3_JaffaCakes118
Size

1.3MB
MD5

c02900f126f72b61fd5f91332c8323a3
SHA1

16ae76f918925050bca5cbfb46bca7b9b32eb534
SHA256

5a1a86daf091121ef9955eef481ac8423846d00db3cb6bc36f705f1499ed38ff
SHA512

4d8ca77c620c56b1c98145e2b1dacf1be2e518a6c46f97762504b9b88c1d2625eca00a53c265854865b8b9dea05805f703adca3c5fbdf77034bb673fc2e08600
SSDEEP

24576:MsXmWHZakG5u0iggqyZFMtB6KWgdhQb+k9kDamZUeZOUX:MsXLHLGpigrIFW5dJkYUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c02900f126f72b61fd5f91332c8323a3_JaffaCakes118

Files

c02900f126f72b61fd5f91332c8323a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 5KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1021KB - Virtual size: 1024KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ