1214cb90afb8944dcd7f86340fc269da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1214cb90afb8944dcd7f86340fc269da_JaffaCakes118
Size

475KB
MD5

1214cb90afb8944dcd7f86340fc269da
SHA1

b6b79fe550dedd7ceb4980dfd6b351b753a0fca0
SHA256

87888e4467562b38fc969d58ab6a549a60612f11af59564d6a348ae60ae180b1
SHA512

f3ca9d0ab1568ba10029b8de59457724aea4e860694d2b09d7d7695fe10fdb1daf3c058bcb1f22864cfd6fc0521d760ce6c4fb182b208c998a0772f93591a4b9
SSDEEP

12288:zRdNz2aiIH/tpvw2x082V0ZfrCdoegFnh/7n73QWmAkWWVEeHLf8yHK:t6aiIlDx0D2zCC7nh/77gWmAkWWVhrE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1214cb90afb8944dcd7f86340fc269da_JaffaCakes118

Files

1214cb90afb8944dcd7f86340fc269da_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 319KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 580KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ