ce5835ce82c4bc2462fed9bcaa8be364_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce5835ce82c4bc2462fed9bcaa8be364_JaffaCakes118
Size

705KB
MD5

ce5835ce82c4bc2462fed9bcaa8be364
SHA1

4ccf078118874759ed039ddda7af4b1fbc76c17e
SHA256

d774217a40bc7926eb07f2c51e1cdceade46beb90c59d50069efca484b96af2e
SHA512

ade28352a24c1488ea409da43ec00a7de8de30e39872e4e646e180cdb468df6a816d10cd175a85f6932ad73150c606f227cf0ede09e85f9d31ab3c52a3c2e2dc
SSDEEP

12288:3hVBA/emC/0A+8bGPD/Nlj5WbG7zb7ehxumdyAU5rZKjjBBtZrlOZSZYS6+GQcq:3zi/80A+8bGbjjiGWRGIBBtZBOZSZYSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce5835ce82c4bc2462fed9bcaa8be364_JaffaCakes118

Files

ce5835ce82c4bc2462fed9bcaa8be364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 479KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ