081b2775fc02543fde00a2d932dbece1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

081b2775fc02543fde00a2d932dbece1_JaffaCakes118
Size

715KB
MD5

081b2775fc02543fde00a2d932dbece1
SHA1

7e4058595d8f1249da91c064ed2bbb0ddcfacea1
SHA256

deaa327d34051224b29925a3313af387abded48b299cacfc768a0af38495bf30
SHA512

a8c44ebea3d7b7cf901c0d2fd0ccc0457799adce2cb5bace0c317ed2dcb47a15b3da38b3ce050d46ad0e3c04bb1808e6747dd42fa591ede11ac457a20a6df9b0
SSDEEP

12288:F+PLqLDiv5kNPk6OVZxjuxmNvvtiN01dbTfTtSK50LruIZ2efjW1L633no2k1JmQ:F+PGLDihyoduxm5vtfZSK50LD2mjD3kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081b2775fc02543fde00a2d932dbece1_JaffaCakes118

Files

081b2775fc02543fde00a2d932dbece1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 685KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ