f667e576c020ab18748dd18b75901601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f667e576c020ab18748dd18b75901601_JaffaCakes118
Size

2.1MB
MD5

f667e576c020ab18748dd18b75901601
SHA1

6aaee15ffebf3be5eb038e5a2b7ffd357af59aeb
SHA256

ba9f62bb08aca70a283d1ba7a18a00440bb02889fb6b3c058c4c87d1d826bbe0
SHA512

ac468265ade19f8b0f5110b6f01ea5c09ca54483a077cd53ec40a6d5c6f80a29c8076a3448eae0bf8abf132e0a34cae62d76522e1260e04194c135dd2e665106
SSDEEP

49152:z84lIhDXwhdlyJ05xHID6vaYUjLUUxw/P56+C2xmRU:z84Bhs6Tes1Pma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f667e576c020ab18748dd18b75901601_JaffaCakes118

Files

f667e576c020ab18748dd18b75901601_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ