15d1a7ab66da4f0066b28cefece60d9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15d1a7ab66da4f0066b28cefece60d9f_JaffaCakes118
Size

993KB
MD5

15d1a7ab66da4f0066b28cefece60d9f
SHA1

fa1bd1426d647b2b9cd6a527d44221c0caf1c0b0
SHA256

7e8e6c15e3ce001a32992eee3922527bd0744a51d2448b93ad6eb348575ae01d
SHA512

d5faf93f94d57ae9f974c2c7a0f86a9a52a050195c3d0923ae5cd5338aad166d9dd436369e559cc39ff2c7a1f26d2263e97fda3be38b23d775924454c9ba873b
SSDEEP

12288:Ed7dkx1hW/8LTp1EZ3ko0ufo0qbgnULKicaZ4CCOuSsU53+ofmFYkpd26OX7:oexsIs3L04obgnI5CCfu/QLkfOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d1a7ab66da4f0066b28cefece60d9f_JaffaCakes118

Files

15d1a7ab66da4f0066b28cefece60d9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 569KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ