f056152fab5043107a1ba3dd0abce4bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f056152fab5043107a1ba3dd0abce4bd_JaffaCakes118
Size

688KB
MD5

f056152fab5043107a1ba3dd0abce4bd
SHA1

b007f55bce7e107ee4293aabc7cbf3802b2bd699
SHA256

6c54f8a6228c7e114a505c170a54748b1c4756917227a047580173aa55d9072c
SHA512

1bac2448257530d02e2af208b3e98b481e8644f5201f55771809349cc79213485e6aceb7bd0105152cd8805685378793d2cdeaaccfc5c4c2fd5d9fdbc8ff0db3
SSDEEP

12288:aFGpg5kLXR0n7fG0eLpmeW2YVmkeP3BXjLY9gVanABZQOz4kuYN4eTl:ziA07fiL8SrRBXjLYucnAj3WveTl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f056152fab5043107a1ba3dd0abce4bd_JaffaCakes118

Files

f056152fab5043107a1ba3dd0abce4bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 610KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata
.rdata
.reloc
.rsrc/1033/MANIFEST/1
.xml
.rsrc/2052/GROUP_ICON/MAINICON
.rsrc/2052/ICON/1.ico
.rsrc/2052/version.txt
CODE
DATA