c2475bd64b1a18eb29155e7e9da33a45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2475bd64b1a18eb29155e7e9da33a45_JaffaCakes118
Size

414KB
MD5

c2475bd64b1a18eb29155e7e9da33a45
SHA1

4c571c24067912be71628f879ce2ad366cd60571
SHA256

6edd65abcbc710c36cefb575bf300529b846dd658374860ba380981fe1647f91
SHA512

3c4697fc8812a9045a3ae9a96440e3790d7dda9b9fe041b3cfbec70bea7888de81f2a0e636865527f8663e1cb058bc6555fc9465704ee386fef38fb9d6ad8581
SSDEEP

6144:ksYCM0PHl6UkQ99JsgAU1eXvJzHBdZfLV9F1eGg4rUdh0CSO/0IIgrn0/7qFHMlX:SC7PHl6UkaoVZ9FeYI7rn0/Oul3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2475bd64b1a18eb29155e7e9da33a45_JaffaCakes118

Files

c2475bd64b1a18eb29155e7e9da33a45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE