047bcfd6a02d59c1e5790373b8a813d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

047bcfd6a02d59c1e5790373b8a813d3_JaffaCakes118
Size

918KB
MD5

047bcfd6a02d59c1e5790373b8a813d3
SHA1

7628d58c4666e15a7638b05dde885d06cb88e411
SHA256

6d3657b04b167ad43d657024e8df5acd88de95ebc270559788d3d29a37c87b64
SHA512

1bc923369f8e9c10632c3e68e668d077fb2df012f9c10bcad38f66aa8c08f500c1d12c1a01e3b4f7209bdfead13e08ac183bcfc0902f0b924b4984538e1e6c51
SSDEEP

24576:7vzeg7RWaNZS/3OK3dR4/xl04IRM5loFs9PgJ:jFN+vP48tJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047bcfd6a02d59c1e5790373b8a813d3_JaffaCakes118

Files

047bcfd6a02d59c1e5790373b8a813d3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

A
Size: 207KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

C
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

E
Size: 53KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tqn
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE