256bd8325b0aaea5e70773fb99ba9881_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

256bd8325b0aaea5e70773fb99ba9881_JaffaCakes118
Size

86KB
MD5

256bd8325b0aaea5e70773fb99ba9881
SHA1

13dac9c314179f75f93776499d3e372997db2e04
SHA256

be5c16cdd3dfaecfd7adacf19308706c66453ffcae88c03c0fe85352290f55cc
SHA512

73e7adacce2181e28c0cb96b3c0852067e4959dd2f3af0702a574dd629941e9130e928e70057f4e9eaf6ec533e9023a5b272d50b38036ba2e4c3cd5b157328f5
SSDEEP

1536:e+GBJmmgC0d/K1aBCRvmNUTuq7spYES3mWYBdBgB5PeE1FG4yELwmiEv/D:AvgPK1RvmNeKmESWPC/P71FG4yELwmiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256bd8325b0aaea5e70773fb99ba9881_JaffaCakes118

Files

256bd8325b0aaea5e70773fb99ba9881_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ