2824c6bd410e7a0a18f9c81ecf2dc999_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2824c6bd410e7a0a18f9c81ecf2dc999_JaffaCakes118
Size

482KB
MD5

2824c6bd410e7a0a18f9c81ecf2dc999
SHA1

ec1d750a529945a815d551406bd303b107b8ce91
SHA256

bb0483b75dc39ce0d1570410c62f2a11ee60b5d9a36e51ec3b7ed37e3ed009ae
SHA512

c64ce1fdd786eafb6d14b2130fae14ff8fbea4a1d44d1980775cccbf5902974826ceb25345b6605bb767aa692723291888a03aae6b91c5f4a73f6ee35e5d8364
SSDEEP

6144:IfGAMFYo6pqZE0yAgqeCthUB3ThHsbNkHOFKoapJ058RNzvTZIQU/YMpxzgA7XyL:OMFj6GLveCU3dMKvCQUGA2G0N5Rv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2824c6bd410e7a0a18f9c81ecf2dc999_JaffaCakes118

Files

2824c6bd410e7a0a18f9c81ecf2dc999_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 686KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ