01ad70ea2c985e540b4aeb284a6fa3a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01ad70ea2c985e540b4aeb284a6fa3a0_JaffaCakes118
Size

81KB
MD5

01ad70ea2c985e540b4aeb284a6fa3a0
SHA1

d880082bcc6870c456b73deaa15dff1807395761
SHA256

aafe5e8275a02fb2021cad5e94ee3ac048b6ce2557a76ab8dfc9ecd3c6699f09
SHA512

5bae485e7ebe6fb11c03049f13acdd5c0b95a1d01e5f55550f46e4ffac5b6d84027d3b85c940e08779d67b76866344a0a7931d64538dda4908636e6ac5648c46
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzpNUiYAYrcVx:lV2BZVPlFlnxClFvLLcA+sPDzpzYoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ad70ea2c985e540b4aeb284a6fa3a0_JaffaCakes118

Files

01ad70ea2c985e540b4aeb284a6fa3a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ