f535891cc882b0f38c3080a8f0689559_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f535891cc882b0f38c3080a8f0689559_JaffaCakes118
Size

366KB
MD5

f535891cc882b0f38c3080a8f0689559
SHA1

5ade51f040c4afe39311deca0c4ce090d4f44bbc
SHA256

1bb21dd2c197913bf3fe53b56f71105bd54dab2282a026ca924b43720f9259af
SHA512

231c1b122304fc27009301e65a0bed435c769e243394e1360d45a12f877502312a7816f0579f96a628bef9f4bc53537f1763f9f043711c61c40ac55e27fa1191
SSDEEP

6144:m9oH01lQfJOM466TQZSQgJ0W74M13ZdS0C4N9TfBE2EoL0BSI65l8VSl:Yc01lQfJOM4lUZSh7H13e0fCbW0BP6Hx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f535891cc882b0f38c3080a8f0689559_JaffaCakes118

Files

f535891cc882b0f38c3080a8f0689559_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ