f62dfbe5998a80785c4d63f9b2d0842d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f62dfbe5998a80785c4d63f9b2d0842d_JaffaCakes118
Size

188KB
MD5

f62dfbe5998a80785c4d63f9b2d0842d
SHA1

24e5fce921c71daf415cbb0c1f4b16a5d9a4f716
SHA256

037d78ba2ba3366411001daa29b964d9c113d9adc115d5d78e5835001211ebe5
SHA512

4e7bf47ce9e641c299c5e9047ea38222133538cf850056fe23227e5d3e0dfe89ec026c2054bf517d0e28003aade063f5474b0b5ac75e02cec008341f5bc3137d
SSDEEP

3072:l82162ffD2O2U9PGAZRc8SDdw0Gd3gbPD2gGm8IRZjB2tC0lX94KP9qJyM4rGs5O:l8G6ufD7pPbc7pn8QbPDVZ3RD+C0l9oH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f62dfbe5998a80785c4d63f9b2d0842d_JaffaCakes118

Files

f62dfbe5998a80785c4d63f9b2d0842d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 462B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ