540296a9126728b62cadc3fcdb39ff70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

540296a9126728b62cadc3fcdb39ff70_JaffaCakes118
Size

3.2MB
MD5

540296a9126728b62cadc3fcdb39ff70
SHA1

68fcfe8b6a93322b167dbde83d99899921125d9a
SHA256

1db17672f6dc6d3e50b7d62366894241e190014e5c2196f578aeec5a6e22febe
SHA512

0c5c858561c65a880f9f66dffb596c679a17b1a469465da305ce7ea0cb7d39aab049673ee3f6d007b3e1488b5910e81b63b2bbfa00c689f56e7e67c375b85875
SSDEEP

98304:iDFydqvjdVyFM545r/my/0udXuZP+uENndqO8xuwqSS+QL2muIChgjHxDchF6nOF:iDwgY95LFXu6NndqO8xuwq7+QL2lRujk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
540296a9126728b62cadc3fcdb39ff70_JaffaCakes118

Files

540296a9126728b62cadc3fcdb39ff70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ