052882be5db40c2cedbf0937e408fc2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

052882be5db40c2cedbf0937e408fc2f_JaffaCakes118
Size

77KB
MD5

052882be5db40c2cedbf0937e408fc2f
SHA1

ec0b4c577dd46ff71e592577c83a954f5e2c1416
SHA256

b199e458689bc431b5f569feac1a6232e689953287747c04d0059a034d9e8bf0
SHA512

1cea490aa6af75fddda60438f318c9b016eb8d2d8161e46f15e5f4768f28fc659d554f5048efd6c71e52f2356d25b5f7e1378449095ed3b7b0319f4c9da008ed
SSDEEP

1536:yOI5rPgDqOJDjle+ciakOpsg5+XDz6ZEXm5iktP0cLph:7gr0qgDpe+c/kWswDF5TVr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
052882be5db40c2cedbf0937e408fc2f_JaffaCakes118

Files

052882be5db40c2cedbf0937e408fc2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 53KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE