375c726fc0379739523b824f08d4361c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

375c726fc0379739523b824f08d4361c_JaffaCakes118
Size

500KB
MD5

375c726fc0379739523b824f08d4361c
SHA1

a7d9d51c478a54f277dcf20ab104a640d3db4b43
SHA256

bc067c94538c8e32c794916a459fa6120740f54bc9602135b8a25bfc2af3a6d6
SHA512

17495c405f5d4f3f9638ac610ba45f0bbdb262ce5d78f46b17a4c2e23d62aeb674499704016fb458c690a69a4340b14d5c2f9933f1d784e7a890938160db7c97
SSDEEP

12288:P4qB7N9gv/gtgShNS4SCLpFUjyVny4Tfln:PpR4UgkSzsUjyFfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
375c726fc0379739523b824f08d4361c_JaffaCakes118

Files

375c726fc0379739523b824f08d4361c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE