f63e1174136ac3c15f2a9c28753bb199_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f63e1174136ac3c15f2a9c28753bb199_JaffaCakes118
Size

361KB
MD5

f63e1174136ac3c15f2a9c28753bb199
SHA1

566ebbeb4cf48750115dec1fe7d9b6edde387eb4
SHA256

15a72cccf5c2512d3646fd7103965f73253218daddee11d7116b512e50291978
SHA512

fbf21e2ac9c854a9b49780c135f7a00dd21444fdcbf8dbb13a96de5dcbb86c919701dc475e25240a34f9da8e392ae5d1d795973b489a85eac8576e39c5624c14
SSDEEP

6144:QgfAXtImXAUS7/3NSNSyQd0baGQ60VndK1wD8XmjVgu+1fFw:q+m1A3NSNs0rd0VndKCD8sVn+1fFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63e1174136ac3c15f2a9c28753bb199_JaffaCakes118

Files

f63e1174136ac3c15f2a9c28753bb199_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lhhack
Size: 360KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE