098485d0d3937b92a10612cc01044d51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

098485d0d3937b92a10612cc01044d51_JaffaCakes118
Size

232KB
MD5

098485d0d3937b92a10612cc01044d51
SHA1

fb60fe278997d15a1af78612990b75035212dcef
SHA256

b681bb3c96bc4c40129f1932c6cf218c9007887377221eddba102a8db0134374
SHA512

ed3b7ff718207932123c160dd4923dc1e934b726addf1322e04a4702a487a2f36e3887783c844678b7bef60a46b227129f5900708d646b59eeab0828e00c598b
SSDEEP

6144:1fVCFI1PTWRoZ41T89k9As2ZKLF1Co28hG:YkT+oWKBBefr28w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098485d0d3937b92a10612cc01044d51_JaffaCakes118

Files

098485d0d3937b92a10612cc01044d51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.re3oc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ