f052e159bb07b172b487f1b7ba58aee2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f052e159bb07b172b487f1b7ba58aee2_JaffaCakes118
Size

148KB
MD5

f052e159bb07b172b487f1b7ba58aee2
SHA1

3f010091de51e290532014f3f90acbaa20507b0e
SHA256

9353b1238667ef91c89f1a8cbd68dbb7e64814342ff77301acb49574e9f2a840
SHA512

858b635af507970c74ff346ed8f3a526b886d22f4944c97d3b64856be6cde7fc0dac77080ad3f060d9f90ce99ff3ddbb8b799123aa5b573f2123a71bc8750497
SSDEEP

3072:gYsMOUkHMOp09DXWhbrpVlffIL7+4NaskiidoaWMUjOp:+5HMXl4ZV63adoHOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f052e159bb07b172b487f1b7ba58aee2_JaffaCakes118

Files

f052e159bb07b172b487f1b7ba58aee2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 103KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ