065c8103f03dcfbf9bb3a98349dd464c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

065c8103f03dcfbf9bb3a98349dd464c_JaffaCakes118
Size

1006KB
MD5

065c8103f03dcfbf9bb3a98349dd464c
SHA1

67ab2c64e4fc3456b3a260d2cee0f37d48546a1c
SHA256

d245abf215d900f86fc4f4942edd6b2cc77401bbf82feaeb11b01729834a0849
SHA512

2b90d803de8ced80b060509801d95d7ff97937dd6c40bfe5ec45fdb3324141f4c108230692d40d9f996d45f24eff803779e83b96e719f38b06014c871c26cb54
SSDEEP

24576:7I39d8SdVsNQihpS/S4cA0y7D0aj8ffe2FnghgebVKo0Ld8:76d8eSNQihU0oIajaxFnuVbv4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
065c8103f03dcfbf9bb3a98349dd464c_JaffaCakes118

Files

065c8103f03dcfbf9bb3a98349dd464c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ