01963f6f1999137a66d4a1c8e3976c77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01963f6f1999137a66d4a1c8e3976c77_JaffaCakes118
Size

296KB
MD5

01963f6f1999137a66d4a1c8e3976c77
SHA1

d819af8c32a54ee31414f8a27cc4517149ad6fe1
SHA256

dd4bc83d6b8aa1100c2bce197991a8afcf2429d829e6205b02c12d6b00fbdb48
SHA512

c8c19d0a8502c84e5843298eae948bc5f1cbc5d210f8f74dce8864c793646d41cf06300dc4e96857ae7c45fb2619ec65dbf532d14f5998f8b7fdc097df1a3a96
SSDEEP

6144:KVwzESjmyfYZz/0aq7a58q5L5yWZnX+iO2dyZ8erRFWniVlv/0qfzYlr:KVyFjlyHq7a5J5lnI20VMUE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01963f6f1999137a66d4a1c8e3976c77_JaffaCakes118

Files

01963f6f1999137a66d4a1c8e3976c77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 180KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nnnnn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEPACK!!
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE