14b43333b3ae581543d859e467c3bfbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b43333b3ae581543d859e467c3bfbb_JaffaCakes118
Size

1.9MB
MD5

14b43333b3ae581543d859e467c3bfbb
SHA1

c0c6a60727b680de47bc78f0546ec50c210216e5
SHA256

699042c9ca8858d59df1e01c321c0fb5ab61e7096d2a4b1f18d41bee0c8cd372
SHA512

ecb0639e51af1e0cf53e29e8db1f399cd3d1166a85a0531309ea71fdf32cd2bba6c28bef08b7da09908befb0630cbe57a4698e90ff45ae4844dc89f7b465e063
SSDEEP

24576:pVObYsW38Mr3HKBHHK6psh8P87iAriLhWtIAUy1C3xDu9HAnjxiv8MT+v+6vaiU1:pVOfWN2pFG+ygBOAnj4vJT+vhyiUDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b43333b3ae581543d859e467c3bfbb_JaffaCakes118

Files

14b43333b3ae581543d859e467c3bfbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ