f58b14b4a0903e7f2b24bef211f8e241_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58b14b4a0903e7f2b24bef211f8e241_JaffaCakes118
Size

695KB
MD5

f58b14b4a0903e7f2b24bef211f8e241
SHA1

17dc83453102835dba38ca853e39d2b9b1c04bc9
SHA256

4336585264bafc0f566e2e6847f62f73a314be669ec40b15cbfa3abb82e9ff1c
SHA512

89fc303f831b63008f16b9dfe9a91602efb7aa008adef5832b7a00aaad908cf2e513fbf5a0ad5d49a55bced83aaa9f1cae8759320c456af3508337d5d6000efa
SSDEEP

12288:l44B2F5ibFjTF4fpp1c9lLA1OD5KYi3nX9mWoFKQDpW4PyumYOyba+zI:6K22NJupp12LA17nHIFpWyFbOylz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f58b14b4a0903e7f2b24bef211f8e241_JaffaCakes118

Files

f58b14b4a0903e7f2b24bef211f8e241_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ