01132249344cd866a62075649908bf3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01132249344cd866a62075649908bf3b_JaffaCakes118
Size

152KB
MD5

01132249344cd866a62075649908bf3b
SHA1

b6d3a29be158ab89dd1b25daea3b91c764e4804c
SHA256

831d12db70b3c7470f6ff18485eeb67cdd3b35423a1f12dca96b5de99b99ef11
SHA512

8350295e9d989a59e04aa4a2b3603431808c82c4aade18a44d5760536cb58fc953d4b2998a9fb88e0e3be2b4088c1be7bc99a1d04e2083d264dd1cd35ad17416
SSDEEP

3072:381tA1ijdOKQ/1u13lW6yXccCCcV5jymoJRgUdmEDdjX:P1kI1u13AH8COhymyRzdmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01132249344cd866a62075649908bf3b_JaffaCakes118

Files

01132249344cd866a62075649908bf3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 293B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ