de1b7a360ddbaa854a1baca20fcbf44e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de1b7a360ddbaa854a1baca20fcbf44e_JaffaCakes118
Size

112KB
MD5

de1b7a360ddbaa854a1baca20fcbf44e
SHA1

afabe6a90b0f8cdc60b266ae9aa2e420259bc348
SHA256

23211fd34bb34a8ec3c60ae8918e2a73944d01846c279ebc4bad54f1816d2e19
SHA512

7dc4624011672087068dbd8139782a6a19dcb47cd3b4db724a4d790a2338c01fac8f521960059a5b92874d111ea0afabb21a09376a9c2a183cbf25618d9fe349
SSDEEP

3072:6bdMMbInZuacL5vn8mYhN3UFtc7u+Vx/r45LBM4aFIb:wdMMbInZuacL5vn8mYhBUFZ+H/cpBMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1b7a360ddbaa854a1baca20fcbf44e_JaffaCakes118

Files

de1b7a360ddbaa854a1baca20fcbf44e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.revoc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ