c186b5b679d812d0129a849168a5277a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c186b5b679d812d0129a849168a5277a_JaffaCakes118
Size

191KB
MD5

c186b5b679d812d0129a849168a5277a
SHA1

4968fed0ead8adb2c06c15c9d5b38c04872a1712
SHA256

cd742e3c702a95ee41af39f8d6d1db0b651022f3428decfd4d9a3e283be00284
SHA512

c16498eb9ef50cef9782b04ed2ffa56d21337c0165323e80004d5bcaae2d372a1ddd4995b9eb1c06867b041af59d19f0bccbca016ded25b9e8ec1ae4185d6255
SSDEEP

3072:I82162ffD2O2U9PGAZRc8SDdw0Gd3gbPD2gGm8IRZjB2tC0r5Lvet++6Qqwkv4rr:I8G6ufD7pPbc7pn8QbPDVZ3RD+C0la6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c186b5b679d812d0129a849168a5277a_JaffaCakes118

Files

c186b5b679d812d0129a849168a5277a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 462B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ