13a95c64f72c944880c52fea006cbf74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13a95c64f72c944880c52fea006cbf74_JaffaCakes118
Size

126KB
MD5

13a95c64f72c944880c52fea006cbf74
SHA1

2748daa81e17726f37fbd57ce371fed6471be9c6
SHA256

d27d22151dcd85ce8db2aac2a57840a788f63ffcef82819335fbf73d34584475
SHA512

f7ba860ac4d4e7cd4872902108b6edbfacc34dc8a5c095a7fde56bbd56e6159ce33aa2e0d9b0715de5f8a18628b40404397ea937d8497b6b45e014fcb0c63faa
SSDEEP

1536:UwqGELr9FExL3ccjey+qrzIRfyr7m5bs97+OYbd+bIUmLprAIFWjHTMv+rOcEBCz:T0axLdKEzKy3hhGdtUm9cf4ThMSXZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13a95c64f72c944880c52fea006cbf74_JaffaCakes118

Files

13a95c64f72c944880c52fea006cbf74_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ