10dea185007490a7eb557c20638e695a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10dea185007490a7eb557c20638e695a_JaffaCakes118
Size

76KB
MD5

10dea185007490a7eb557c20638e695a
SHA1

6a9c0d7cedebc6c8770bdc0ff367706a3ca93775
SHA256

50ea93a96a4849cbff1cbe9ce54e11bdcd25829ed4e65f96f936ec3f7048b885
SHA512

ba06c8c959b62676b5d54c06cab4adfe8881069edbf2182f73b13a77400881bab4f51ca9381d8df7b8db0e8a2ab837d0cae75b251dae3324ce4ae4e72092d446
SSDEEP

1536:xtS9lWZzenfoHrl/j0vE8Y/MJwbzIY9VPJG8kT3GhQFCgCaU:3SLPnwRAvElBbzVfhG8kTWeYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10dea185007490a7eb557c20638e695a_JaffaCakes118

Files

10dea185007490a7eb557c20638e695a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

e5ruse1

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 277B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ