065c2e81ebf386c81c7bc30f89307132_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

065c2e81ebf386c81c7bc30f89307132_JaffaCakes118
Size

1.0MB
MD5

065c2e81ebf386c81c7bc30f89307132
SHA1

6ce334aab6e086d5839a30034861262da117d687
SHA256

d5b8503f778bbec9049d2d3d14606cc3500e6509010e04ddc698fc87bb889a97
SHA512

2f4d4aea34ada382fb15588ea7b7d79494160aa894ca33a67e34c24ccc583c1a7c4c1edc83fa596c60651ca3ba9033c26abd5f77d2c1f9eb75e42acb87bf4a3b
SSDEEP

12288:YzNCSSzQ0A029DwM/b6PMCMZjYVVhQcxEuOiOdVcB4O2sn:Qb8A0215bkUlqiXc7jn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
065c2e81ebf386c81c7bc30f89307132_JaffaCakes118

Files

065c2e81ebf386c81c7bc30f89307132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ