115cea1da2407ba3ec95772f13e1900e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

115cea1da2407ba3ec95772f13e1900e_JaffaCakes118
Size

581KB
MD5

115cea1da2407ba3ec95772f13e1900e
SHA1

69339b9788c275bf9b569e3f48d6567608a14799
SHA256

a6b71b0dcf0144f51dfe6f42ba56ca1dc4819e3129bea0e2886e3b75a0bfb1e6
SHA512

ca4481e7cfc069630307d420963469bbc7e9c89461e0aba0a09926a6c05fb2cd41cc414b15d19098e8211c7d224e82b9f3d11948293309ce6cc75ae66ec4a601
SSDEEP

6144:qb6z1IpMnSulDoCKHXoZqx2ieJXMFYZ9gaS37B0dM27YrxpIDYk18Dz9CvyPHy/D:qghSMTQOJVLmpIsE8tCv4HRpMa0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
115cea1da2407ba3ec95772f13e1900e_JaffaCakes118

Files

115cea1da2407ba3ec95772f13e1900e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stls
Size: 4KB - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

GARR
Size: 987B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE