f58f00c82730e76cd74036442b0bca2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58f00c82730e76cd74036442b0bca2a_JaffaCakes118
Size

2.5MB
MD5

f58f00c82730e76cd74036442b0bca2a
SHA1

d7fcd8d2c12522a9cf2c052e75f72d7ca0d2f772
SHA256

4bb46ff91acf6cd02bfb78371de2c829580b930b246d360bd5daca29905a6bea
SHA512

abbdefbe9519dbe24e9131950ba3fa80a1b5c8e8c1b941a8c7892c87fbbf7973fcc8d52edfdaf02cba30673ee487180dad094829e93248332ae5d2258a35d8cd
SSDEEP

49152:DQmG27Pz7paFo5kLVjx8XXZ8Tu6p2L0J+SNJ/AIqAet27:DQH27kFo6Vjx832E0cAA15t27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f58f00c82730e76cd74036442b0bca2a_JaffaCakes118

Files

f58f00c82730e76cd74036442b0bca2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ