c78d3a0f39671b7efb7f009057390b01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78d3a0f39671b7efb7f009057390b01_JaffaCakes118
Size

522KB
MD5

c78d3a0f39671b7efb7f009057390b01
SHA1

3183a3fcc53007fd44c52a0d5de37424f15cdb20
SHA256

5f3929d7cda4d9ac60ef91c34d7bb5720020df8d69d343b1c7cb9203c4e4eb63
SHA512

e04613a407cf76311986d14d465ef9e56ede053d145c044a6fb5f2818b49f69107fe05bf2bf2b9e83e32871ac3b1b26ed21ec13dc0e52c613d9feb7e24de82e4
SSDEEP

12288:gcd8PaluMDhwuUI2xmHYSG9dLhQlYshdsA4gbcx:ZqPJwwZsTmF2lhd2Wc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78d3a0f39671b7efb7f009057390b01_JaffaCakes118

Files

c78d3a0f39671b7efb7f009057390b01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ