011ed6db32639f4f4237ed19634bcc06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

011ed6db32639f4f4237ed19634bcc06_JaffaCakes118
Size

394KB
MD5

011ed6db32639f4f4237ed19634bcc06
SHA1

8b47e5790ff042e75786a048d48901dfb748cecd
SHA256

ba63bd0347f2e4f4f0f425ac36811257642b7ae3813b548b80054c2771f4ce69
SHA512

0e41c2fa99fbcf51d86c89eaeb9b28b0e02e7529d605fe512c3f125cc01376a17df5295bb972ac93e5e72953905f193a6e73e8cb5b6495b6d6389f209ceb50f3
SSDEEP

12288:Nk+vceJ2HfgG+26geCaZmS1Q+eIaF2J+j4:Rvzeg7RWagsPm2J+j4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
011ed6db32639f4f4237ed19634bcc06_JaffaCakes118

Files

011ed6db32639f4f4237ed19634bcc06_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

A
Size: 207KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

C
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

E
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F
Size: 53KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE