0415203a7424c54f96249c90f315e1cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0415203a7424c54f96249c90f315e1cc_JaffaCakes118
Size

312KB
MD5

0415203a7424c54f96249c90f315e1cc
SHA1

96eb89dfa2cc8de15f276ffda59ddb74c5345f1b
SHA256

7042f7e366a08bccedbd1019fe1e8b3206be39929da16a1f009116d6b5426582
SHA512

4917239646fddb583691fa3b0cca0c2106d543eb3e289808b8d11b67ce5b097d6c30d38492fbbe33f1d3f918ac20b3c70aae93344e74fbfed947794c87bc8504
SSDEEP

3072:vRoa1DKYtJz6FmyoUWcXFlzeP/rqZpoYe/1FNwpX5v:N1DKYtJnyoUWcXF6/rqZ697wpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0415203a7424c54f96249c90f315e1cc_JaffaCakes118

Files

0415203a7424c54f96249c90f315e1cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

swpmewm
Size: 712B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE