181e7c4d79feabbb1e4b9bf849e85087_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

181e7c4d79feabbb1e4b9bf849e85087_JaffaCakes118
Size

567KB
MD5

181e7c4d79feabbb1e4b9bf849e85087
SHA1

04e6133bfbcfa6bc4a4f186b445dd3a36db91149
SHA256

4bbe8c66f4ff2dca4a58ce7e8f3f65e1af5d6ce08fadc4946271da8ace006a5b
SHA512

961b81d95fc2be5bb19d324f04bed5e37a01d02a0c53f271278d9a7e3a09c66ef63acf738806d2a1a3f18d3f68ed65994647708b6c1602319ebd23138c95a586
SSDEEP

12288:6w5fG8FuJp2PD8NcvizHtikeyfVYKeP4pLzwUWbp+YZMP:6w5fGHpsQN5JHVXePOUbp/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
181e7c4d79feabbb1e4b9bf849e85087_JaffaCakes118

Files

181e7c4d79feabbb1e4b9bf849e85087_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.itext
Size: 4KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 986.0MB

.oyhssl
Size: 551KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ