01a49265c9df666f1aa5e0065db75fad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01a49265c9df666f1aa5e0065db75fad_JaffaCakes118
Size

418KB
MD5

01a49265c9df666f1aa5e0065db75fad
SHA1

d5ca7f6f30dd079d5c644515ecac2adaa6d77ffb
SHA256

01b4ecc19affac1dfab9ad4c5bc8b5c9753a731366f64439b1be354007abd402
SHA512

c96a5579a90fbc1e0b68231259e5ea1910101b8fc60b45ce04d8851d54974455a58ac02454ec328661d9007657e94f7b75b25475af7b6fc47331779e6434f3f3
SSDEEP

6144:c/Ya3Fqxms5zyl2I2N8Zm8KDIsDoaT3l0BtJf5PpHU0S+OYSucq0qeegPWFGh21z:i3Fkms5Wl2I2jBGXXHUhjqneer1R5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01a49265c9df666f1aa5e0065db75fad_JaffaCakes118

Files

01a49265c9df666f1aa5e0065db75fad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ