10bd4891e32390ab800a1380a19b7f31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10bd4891e32390ab800a1380a19b7f31_JaffaCakes118
Size

471KB
MD5

10bd4891e32390ab800a1380a19b7f31
SHA1

e84cfe38e62cd051d0562676ccb054e4f4c0f057
SHA256

89b693ba63a6e780e6fce55e793ca21fa763f5ce0d74c5cec5c1f393ec5a6dbe
SHA512

ed0e35ae69d7efadc69740dd93751f35a2e383d46d1f277aeba8c7f0d6a671c722dbaef9576ebd6887837d91f34045a5786b43ec38f7ea1fdef14b2e0452f49c
SSDEEP

6144:vPAlQZbV0YZn+mdX+C1EKSFsXa39vKyMp192VLd/2cetCAa221iN5601xXdtG0k0:AlQZZ5n+mduZFsXCa190Mt1FPtdkjWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10bd4891e32390ab800a1380a19b7f31_JaffaCakes118

Files

10bd4891e32390ab800a1380a19b7f31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ