152b95116f266a18e619a9bbdf244111_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152b95116f266a18e619a9bbdf244111_JaffaCakes118
Size

380KB
MD5

152b95116f266a18e619a9bbdf244111
SHA1

ee2e884bfcc77bb48579e4339d4c370be5517637
SHA256

dc0159c17e4e312e8613861136a0d5bf6171e8c819668a391e8aeb20cc66dd37
SHA512

fb28cbf7de96e019eb38c7ecc790cb31a1d8116c8df4006f3119f5b5cd7f287bba9931feccc6f0469b23b9d756ded03e97c87c6449b9474f3ce559b413eef56f
SSDEEP

6144:kBkzhY+0vCbsZIa9epKcgn6RRbUXfo7okRJlmRpUOoZHSmyYIOVvN8Fl:ttY+0vCbsZ6K16L6fOkRpRG4YIs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152b95116f266a18e619a9bbdf244111_JaffaCakes118

Files

152b95116f266a18e619a9bbdf244111_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE