298e933fb93262dc49a487dfc160460e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

298e933fb93262dc49a487dfc160460e_JaffaCakes118
Size

120KB
MD5

298e933fb93262dc49a487dfc160460e
SHA1

6e55b330e4f3e9e39984f319232d43d1ed9af3a7
SHA256

f04faf3777c23e95737d2cddfa8a306a9742e0b46f482a27b7af87f50a065d42
SHA512

399737368341ff384b24fed79e13bcfd74e615ce5df929f26610f6ca55e3e7d4a94541821b90fd6cbc2e5b391d5f0e8223d39583540fd6ef08f29844d22def3f
SSDEEP

3072:Y53qlIDKNnzaNe+jU003Twd4+AezL2URrtzhrz5XW:Y536NStj+3US6OYVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
298e933fb93262dc49a487dfc160460e_JaffaCakes118

Files

298e933fb93262dc49a487dfc160460e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 852B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ