11570b958cc282fc20d982b423d8b730_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11570b958cc282fc20d982b423d8b730_JaffaCakes118
Size

237KB
MD5

11570b958cc282fc20d982b423d8b730
SHA1

ba46fae0599ce6306c97db0bbf83c81ece0f9ca1
SHA256

bc46cef1377e3258e4835d24c00b4eecb48111f5b0cea4b58b8701cba9b32685
SHA512

92becb29868cb6048c29d90786b5c82682aedfe2d9216b3d2f3d98c2cfd2168d4f73e661fccca51b38dfb09ec371f05712c7ce5d1f32da72b0e545e141f1dced
SSDEEP

6144:oN2ysRt1/g5Wgqfo8XzAP2O3nbM1pxqVsiL2ng6p7D+:HysR3/ykfo8jAP2OrGpxPiL2ngy7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11570b958cc282fc20d982b423d8b730_JaffaCakes118

Files

11570b958cc282fc20d982b423d8b730_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 372KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ