01b058a3f30856092cbe7fe8182f9523_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01b058a3f30856092cbe7fe8182f9523_JaffaCakes118
Size

169KB
MD5

01b058a3f30856092cbe7fe8182f9523
SHA1

1c83d884305b6218d9c26c38f5ad63a2849661b3
SHA256

1a476330dd62e5cbffab0e1faaed6babe0e12251d3c961d255003a91fc9a73d4
SHA512

77db7ba38251c52d2cde620dbbd74a878c92cfb29772b78f64b4f7fbaf60c4a7b1c642e838b9bc2bbfa47206103711e098d4bf2eeb711ec98243e92b7156b78b
SSDEEP

3072:7qVHBsooGSLontOfwVT5oMnqMP2mMfSvG5IbVwMyIgn2PqWij1yKrQgSFxsn:2VBM3stOfuoMBTyMy/2jMyEC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b058a3f30856092cbe7fe8182f9523_JaffaCakes118

Files

01b058a3f30856092cbe7fe8182f9523_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ