293af32bcf626b0580607f8dce4593c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

293af32bcf626b0580607f8dce4593c4_JaffaCakes118
Size

151KB
MD5

293af32bcf626b0580607f8dce4593c4
SHA1

19241531752f4e421bcf95fcbfb4b2e3783e285a
SHA256

eb1f82f8af4a69dc3033f7599bead5a1619594cea48bfae886c92282660977a6
SHA512

a7759c05ddffd79e3289acc70693919e675703e4e4fb05bf694b42f4b90451017af3611df60a424fe67e5c34ad9584e70c0b5aa516342ec0b4889cd1e83313d0
SSDEEP

3072:3tMmO2FTABpbuBQS/Wi0+9Li1C0NfH8YFY2UxkFFGM8:3tNO+TAm1W9H8yY2+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
293af32bcf626b0580607f8dce4593c4_JaffaCakes118

Files

293af32bcf626b0580607f8dce4593c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ