f701fbff41438e70c8a9c0d3d8f1298e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f701fbff41438e70c8a9c0d3d8f1298e_JaffaCakes118
Size

2.0MB
MD5

f701fbff41438e70c8a9c0d3d8f1298e
SHA1

505dd2b3f965678cac02772bb0c9b81f703c6a6f
SHA256

67cf184f749593a286bfdf1a9a89b73403510edb2fe0da1cc624e254b8175670
SHA512

0b00dca19fd7dbbce9f57bc84534dd8fe73644c2806c2a3bc65ad2b361ab2fa2325cf9b65022dfc0d76b024cede8c996ea0a4e45791e7b231b9135fe86f49cc3
SSDEEP

24576:cr/CzAnyF4hhvPgMfv536/WXzxnIuUVHbUmvVt8cuC3EIBZQcV3xhLAbkT0Bv6/u:crK3sloBWjCuStBL3PnQkBh0Z6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f701fbff41438e70c8a9c0d3d8f1298e_JaffaCakes118

Files

f701fbff41438e70c8a9c0d3d8f1298e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 972KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ