019858aa50ed80f733479ebc0cd00c17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

019858aa50ed80f733479ebc0cd00c17_JaffaCakes118
Size

663KB
MD5

019858aa50ed80f733479ebc0cd00c17
SHA1

b36638f14c1ec32d7ab52ed417c03a5fe6070770
SHA256

c6f882570105a57fbf49700dcd2fa4c4e8debe82abc9df6fbc8c3a36f159c197
SHA512

f412e781864fad3316b5c45e6c85d856a8be47c26e57fab677e705296a2389c1442bcf9b873b39ed6280a9e6c743ad824aa9739820da12218716bb84d9ddffc4
SSDEEP

12288:GMTumm6wD6z0WWA+LT+7LnBoxPXoIvzwXbfn9h7AajGAjbhWg:GyufH6IWWA4E+foIvzInwfihW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
019858aa50ed80f733479ebc0cd00c17_JaffaCakes118

Files

019858aa50ed80f733479ebc0cd00c17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ