434499915837da9c7f60311a160639b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

434499915837da9c7f60311a160639b3_JaffaCakes118
Size

957KB
MD5

434499915837da9c7f60311a160639b3
SHA1

49fd4c1bd4fcc4b7339cf2ba95cb721570028fcc
SHA256

e00212700962b9527f7c464fc6fa6742144808ce06db67defad9c8e9d88ec521
SHA512

bdfd470a24e9308cc3d8523a3fd9c37f801fe4040e17d56a936a729c830beb6f1a5a70e129504bb6bc45e6fd2d88e73d8571b7924be9a881581906841c9386d9
SSDEEP

12288:YYk5SUi+7pFRkO5EqD1Otr5B8B8DXdTJmE8kdIhnWX5tbMArzo+nwT27mLNqhQPf:VYL7lk01QUcXdNxmhMqAIfT2CLNqh/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
434499915837da9c7f60311a160639b3_JaffaCakes118

Files

434499915837da9c7f60311a160639b3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ