31164f4c3af1e4db59c20180b910f602_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31164f4c3af1e4db59c20180b910f602_JaffaCakes118
Size

675KB
MD5

31164f4c3af1e4db59c20180b910f602
SHA1

e8c00a4e0fb36141e369c47a5c6b2c00e8ba5f75
SHA256

b0f4d3257516a08b5dc24391e2b671ea027e67057d7d6fd67506d77b3d185b6c
SHA512

d8a83ed867d567fab7cf721ef8c795ecc3c939a019ccdc87937bd1ec05cb4db3fe17ad6da20b881574bb8ae69f8c9fd8fd980df4a7f665dbe9e5df144f3a5eb7
SSDEEP

12288:kJ0p6T06/rm6agttTknjkxCdDLAvzVyBRk2wGHhEEWBYCHBe7uN:km6H/SSjMyvzVuRk2BHeEshey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31164f4c3af1e4db59c20180b910f602_JaffaCakes118

Files

31164f4c3af1e4db59c20180b910f602_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 595KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ