403296efd7641ff77d662a40fc4c5c59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

403296efd7641ff77d662a40fc4c5c59_JaffaCakes118
Size

81KB
MD5

403296efd7641ff77d662a40fc4c5c59
SHA1

43f3a8f366cc945c921d3f88b48a3a8f3502a822
SHA256

ad4c66dd66f6612b2c331bf228a3f2725e0c90203c8a1bace8f4b77ec71b8804
SHA512

f1515c788c84e5474d1e7423fae61a0672be72aee8ae46d94a8db3561bb7fa209bacd1c7067c797234ebb4e51a1fcea031503a46e3d75e83cbfe25f26b2db7da
SSDEEP

1536:VEtH+RptxBQAHe3RUhjlajLt+2z7Z4s4fpYE9:VEtH+btjAaSw2z7Zf4WE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403296efd7641ff77d662a40fc4c5c59_JaffaCakes118

Files

403296efd7641ff77d662a40fc4c5c59_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ