169e0d50e05a32dab5b88b3d9a0ecd3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

169e0d50e05a32dab5b88b3d9a0ecd3d_JaffaCakes118
Size

507KB
MD5

169e0d50e05a32dab5b88b3d9a0ecd3d
SHA1

6ab31ccd298f57941a4236002edb5a7ebe18fba2
SHA256

b6c62939291a2dfbb8d615e7411fdc7528518ff5d102f022f5269e102293ba14
SHA512

81d91c4540c93e53e296d9bebddb467b0e975248b8885182eafd618b97de090c7fa7954b6073ca75d1f585ad634b5e0793498b95bb0263c7991f77dc7fdaa23f
SSDEEP

12288:MroAeNXOsRbfEDHq1jUyE+RW9qEbRC096potA:MroBzfEDqlUDX9q2g0Qp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169e0d50e05a32dab5b88b3d9a0ecd3d_JaffaCakes118

Files

169e0d50e05a32dab5b88b3d9a0ecd3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE