52a11922edf9a54cf50d0c926c8d3ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a11922edf9a54cf50d0c926c8d3ef9_JaffaCakes118
Size

1.0MB
MD5

52a11922edf9a54cf50d0c926c8d3ef9
SHA1

8b1622979d4531d27bf6a1b88e92f7a5341bea7b
SHA256

e081a665dca4a39f63a6b09eb81244900b8a524e257763ca6378a8586e0e48fe
SHA512

9cd01c7464805f6e8ecfca7a74110bfba336bb1bda15147b77518641f2ba1b52512196f0e07bd1ed3fbfd1e6e14c1e841e818a9f6d65244ab09a08c4633a7644
SSDEEP

24576:wlOf4g7odaCiAzM4qjnSFw4x/wS/6bVv+U+qaec/WD6mRKIlWezPsw:SMYakzMr7KwAAWU+Qc/o6qFWe79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a11922edf9a54cf50d0c926c8d3ef9_JaffaCakes118

Files

52a11922edf9a54cf50d0c926c8d3ef9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 295KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 769KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE