01890b67a8586a53bb30014610269786_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01890b67a8586a53bb30014610269786_JaffaCakes118
Size

2.0MB
MD5

01890b67a8586a53bb30014610269786
SHA1

90adc8470ba3cc35bf4e1f109d50d2f2a757d1ca
SHA256

b0a68f3d3b39b2f7b039beb7e86ab667358d02d46356b7523e7f40e287d9f1dc
SHA512

fd0dafdffdfe7cf0fd240c90dc5ab2fa976102faae589568cbe22da98f36a5b4e3d5f306895f67ec88ea4be2c2f340a143c3d21921a30699b1c753d37c6fce96
SSDEEP

24576:miz0KLuXtPGGlUb8cngcVPExWmAkdyUMDa3Bm8db+MoHuYFTvEDHrDdZX2:ma0K0PPlUbl91UMQmM+9FTarJZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01890b67a8586a53bb30014610269786_JaffaCakes118

Files

01890b67a8586a53bb30014610269786_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ