f0c31af84f62d199c173e2636ad3d3a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0c31af84f62d199c173e2636ad3d3a9_JaffaCakes118
Size

109KB
MD5

f0c31af84f62d199c173e2636ad3d3a9
SHA1

b70d5e3f11f80ac80da2c59106093673ced51078
SHA256

58bb87ad6426743e354fa0ee9ef16f6ac8c3a9b074dac4dedd3b0c56a0200865
SHA512

79073674b9639411a6481b706fba93bfc6ca5b42754d00b5e5832ac613b170747c2c45f1ed47db56154ebf39350094a870c5985e0f5bacaf27389fc4b06b4fa9
SSDEEP

3072:Ovo8VsYSrQ7F6wbiPHUOFp3ZnskGPIjj/yFIb:NQRi/UO73ZnTGPIjjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0c31af84f62d199c173e2636ad3d3a9_JaffaCakes118

Files

f0c31af84f62d199c173e2636ad3d3a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ