062376818763e331dcc24b16ab001d40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

062376818763e331dcc24b16ab001d40_JaffaCakes118
Size

66KB
MD5

062376818763e331dcc24b16ab001d40
SHA1

5418b29af0cd95825f73b5a54dd3bce13a97b43a
SHA256

b1d8a8db72c883647fcb8a93a21540504c215d9ce21d6250908e56cfc4fa7c7a
SHA512

941e76c438731c8f6ef41233aeac913d3f042b6ce73cdc85c94032afec180b3c45ba2eb2ebc762959a7eca942e3f496a6fe4c7fc939773e4a340b67ded1fbcbe
SSDEEP

1536:kY+J5Dn5IiYBCrTw/At2txnOD8l1t/hl6hxj4QQ5Y:c5Dn5Frlt+sD8l11P6vj3QK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062376818763e331dcc24b16ab001d40_JaffaCakes118

Files

062376818763e331dcc24b16ab001d40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 516B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ