0861c476287225b9210bf3cb6f2c116f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0861c476287225b9210bf3cb6f2c116f_JaffaCakes118
Size

752KB
MD5

0861c476287225b9210bf3cb6f2c116f
SHA1

a3f5618c78f98ff3876526a9351f4c4b0931dc3f
SHA256

de3630e607dd09b764cad9ffe37b32594fad06e27cb95d24d10ecd8da60aa2fe
SHA512

d2261700172822e495e1f2f8d82836d538e6b7d2fad999c57e45ba4aed1d0dd165d6f4a9adfc909ac4784e8f02fe588eb40e678b57e251f058d2a93cc0d15dc3
SSDEEP

12288:Hzc//////XHNS7IWJr9v5UQB1+miRXWPFUlcDifVbkV04wBb2HizDe4X:Tc//////X07lJr1WCcmNUuiM0RByT4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0861c476287225b9210bf3cb6f2c116f_JaffaCakes118

Files

0861c476287225b9210bf3cb6f2c116f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ