13bb4b04e28812d11b4f604576d0e0ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13bb4b04e28812d11b4f604576d0e0ea_JaffaCakes118
Size

708KB
MD5

13bb4b04e28812d11b4f604576d0e0ea
SHA1

903fd57e9378a2696f215d6817ff8cfed55375da
SHA256

d1f3568a5b3ca91e4fe6ea4064c3b70cc7886e9a20f9cb0ff2149e2b5749d48a
SHA512

5b0265a104a1121ccf98e82217d714748b8660edf6d65c287f8f3aeeaa623297502c1a50819e108122d1666b1d1689e9207d9bd15ed55580e6d1785f83f57e9e
SSDEEP

12288:7c//////GNuWUNrvpM8eA0bBSNovE/axDhXPnRlMgHz3MDKiuPOLnllw+2:7c//////GAZe8l0gcxdXPnRllHzqKTO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13bb4b04e28812d11b4f604576d0e0ea_JaffaCakes118

Files

13bb4b04e28812d11b4f604576d0e0ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ