c96bc5a3cf2f9d1623064e900510f130_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96bc5a3cf2f9d1623064e900510f130_JaffaCakes118
Size

44KB
MD5

c96bc5a3cf2f9d1623064e900510f130
SHA1

c4cf1a6f36fd54ba8be9d3fde0d0ff72f4c1f1dc
SHA256

13d0c605ab752f92c438b4e90c73953390e5c2ea8736ede35b9bc0b44c141e9d
SHA512

4f2be17194be822b789c7b81a3f65bcb3ba85f98dc818681abd58ee0e065c3bb79ca242ca5db13ca920733206fa92ab3775650e266e7a97381e6c85faa6ca0d8
SSDEEP

768:ZD9/U4DuFEuGwvkM5+iWkNq0A40Zy4yaZQ+Pap:z/HavkM5gkRtM7NPap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c96bc5a3cf2f9d1623064e900510f130_JaffaCakes118

Files

c96bc5a3cf2f9d1623064e900510f130_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 121B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ