058f357328dee83f0a8625b1066c70c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

058f357328dee83f0a8625b1066c70c2_JaffaCakes118
Size

20KB
MD5

058f357328dee83f0a8625b1066c70c2
SHA1

132a7ec489340df1983240505e29e8109038e003
SHA256

0dd88f734818316ef289c27708a43bcb6d0b35a3dea8094a3284a87d84a6147f
SHA512

c0102d6d50092fc5c5cf92c8251a376e4b37fe5f78f93e383d179f84ac7e469eb69611ac740c333ff5e8f39857d91def10451e66bd5acb3a27ec920425918e30
SSDEEP

384:OG8EuaqcT3pLsz+ekBwhpeIlhqnFhiRABay+2LBP1:fuaqK3pLsz+vMMDiR1y+2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
058f357328dee83f0a8625b1066c70c2_JaffaCakes118

Files

058f357328dee83f0a8625b1066c70c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rDATA
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ