12ab27912a8304a79a68fc92cf6654a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ab27912a8304a79a68fc92cf6654a2_JaffaCakes118
Size

732KB
MD5

12ab27912a8304a79a68fc92cf6654a2
SHA1

b0ced92262f9ab7b6792df543a97829953ac7498
SHA256

d4f5d70a32e03948c61104733cfdf9e278628cf4744097ff67a3bbfe426e9f5b
SHA512

33118518eab45414bc438d45e399409ab08fd90dbb5f4afee2729e55a3cecc1f63b277ab5f49421e5515a47c4bc1d888854f56fdd51a95cbfd44b18ec3051ea5
SSDEEP

12288:k1+UP9zYXhSERUyzQxG0qijd5m7/kJJ0ghNNmXp7T7FdLT6h8SHO:kxdYuyGLnm7cFNA5LT6h8SHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ab27912a8304a79a68fc92cf6654a2_JaffaCakes118

Files

12ab27912a8304a79a68fc92cf6654a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 596KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE