00108176e45ff12a7eff336968e76eeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00108176e45ff12a7eff336968e76eeb_JaffaCakes118
Size

493KB
MD5

00108176e45ff12a7eff336968e76eeb
SHA1

979c18cd7dc2ffc6a05c1867ce3552b31a1f9fd7
SHA256

ba049d8aa581c5c7340903c759ab3248d01044a8c1bc2924a0cce26a1d482823
SHA512

6bdc0e7e8ff5f3a2cca7148ca0d87f74a7d057ad63d758eb8a03621319fa42de99fdac813ca2cbc4513669f882c1a2e0d4da73c2a2a6d320ee04bd34afdd78c5
SSDEEP

12288:7k+vceJ2HfgG+26geCaZnZfeZ1g+3dNvR0n2LQTgMyq8vbVC:bvzeg7RWaNZS/390nDDyLk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00108176e45ff12a7eff336968e76eeb_JaffaCakes118

Files

00108176e45ff12a7eff336968e76eeb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

A
Size: 207KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

C
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

E
Size: 53KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ