37062f54132b1d9f630c06866f84a08f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37062f54132b1d9f630c06866f84a08f_JaffaCakes118
Size

513KB
MD5

37062f54132b1d9f630c06866f84a08f
SHA1

712ec4e41de7eb7ce33f2e9c00777380c3cf6a90
SHA256

79794cae67b613aee996adf3bdb691a0edaaaf134ad200450f50d72418722112
SHA512

24ed3a49fe5a75d66a15141a6c07410899aa4ddca6977c055472f40dc02463353c4e4d955c29a1bdcccf65c7e71b24676fb3add67655e25fbfef7cde44afcccc
SSDEEP

12288:fbv1IEzV4loS8y2uW1PrHE7DA4Kt5XFDrvAF8A:T9Iu46JrPDCE5X2yA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37062f54132b1d9f630c06866f84a08f_JaffaCakes118

Files

37062f54132b1d9f630c06866f84a08f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 849KB - Virtual size: 849KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ