f69dc29b31b50237893ee5cb9cedfa86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f69dc29b31b50237893ee5cb9cedfa86_JaffaCakes118
Size

779KB
MD5

f69dc29b31b50237893ee5cb9cedfa86
SHA1

1877ee05ab42f9a280d6e435b054188423e46b55
SHA256

61756417dd26f7f8266ceaa6e3838220414bba04fb7555cef77c38ef5d7b2850
SHA512

ca9c04bc6262e472eb509f9a66f5c30693ed17b89a54cfe69897356f3ff37afe3d6ef43295b7521b5b7ef1682e798fdbec8ea665c2eb4fb7b196977593f6e99b
SSDEEP

12288:WgF94Pgs2AbZesRVlJU/53CsPU4c8q5wVy9Nc9OVsMgwI+uwicB:rmPh7ZesRVoVNdwNzic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f69dc29b31b50237893ee5cb9cedfa86_JaffaCakes118

Files

f69dc29b31b50237893ee5cb9cedfa86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ