2838829f89589471b35948b53aaf3384_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2838829f89589471b35948b53aaf3384_JaffaCakes118
Size

80KB
MD5

2838829f89589471b35948b53aaf3384
SHA1

a9fd82f2c9166e46338b028fdd71cce44003d5b7
SHA256

6000c018ca11d18cb81fa63dd195bd992e66852ea7db9fac88d5623078320747
SHA512

76115026357efcb3ddc57bbb412c568f3ff5fc1d08bc8cffe15d75f581fc5e622522917042396029997456ffcb95767864d41769d20a1937e532a83dbea5dad6
SSDEEP

1536:LxD/BQ3GGtyzmga5L97FREw6T8+oEPnfUIT/WOfwYGl93:poGCyzoD7sLffUIDWOol9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2838829f89589471b35948b53aaf3384_JaffaCakes118

Files

2838829f89589471b35948b53aaf3384_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE