13f297f6e185b77871428a794aa0b86a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f297f6e185b77871428a794aa0b86a_JaffaCakes118
Size

41KB
MD5

13f297f6e185b77871428a794aa0b86a
SHA1

ed0c3fa592bf96b939e008725f5428cc62c1d2be
SHA256

fcd661a3ed529978db7235e0e34d87c87c7ae6c871d5adb43ecb1942970dcb6c
SHA512

9920a05be826bb49f0ebce25480ee552386fe6673c38b53944b10e60db66eefeaf6989d477ac67355dac0b0dba3c9d37bd2b61cc72b0cfdc31a7ef0a4392a43e
SSDEEP

768:9CFqDQN7fwsY6vf/2QPr6ss9UP9mfgVlZ40CmRiG3rqtbeMLvb8x:MFqDQN7q4fhTvP9Abm8leMLvIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f297f6e185b77871428a794aa0b86a_JaffaCakes118

Files

13f297f6e185b77871428a794aa0b86a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ