563baeb4d5949a7c3ddc3cdc58ae390a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

563baeb4d5949a7c3ddc3cdc58ae390a_JaffaCakes118
Size

2.0MB
MD5

563baeb4d5949a7c3ddc3cdc58ae390a
SHA1

b18df500ec04bc5e661af921dd2529c22ef79b75
SHA256

cddfd155efec66177f3083cc8c3fcb2eb1be3a5a3bca53f29f71e098b350dde9
SHA512

159c06c982228841a68df338312e9071e0a75f5c61db4c6037148722c953a140d905a5ae2dfd52839883dc4f303dfda8aea9cc92c4109c3f8c416b292c64bfb4
SSDEEP

49152:ZJfFlXuknm+cETc1IvatpBckbgiM+JCG:FlXukXcN1gatpBvnJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
563baeb4d5949a7c3ddc3cdc58ae390a_JaffaCakes118

Files

563baeb4d5949a7c3ddc3cdc58ae390a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 904KB - Virtual size: 904KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE