5647b59a84a151f191994e1981c47568_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5647b59a84a151f191994e1981c47568_JaffaCakes118
Size

142KB
MD5

5647b59a84a151f191994e1981c47568
SHA1

fa26ce374b220bd4afbdf71708f5a6c7abab2174
SHA256

c436a6bee1366029688886b7cea17576f52faa5b2673c5daa033bdd033f363e4
SHA512

6120098da284b4a83c329fa654e368b228db84bef4958635e05b976b757129ba076a4763bdb540c74fbfa55733621cb7325d1d332e918d5456c864805f7b0177
SSDEEP

3072:PMAu6fie5g9gUSD4D3pLYpfClDrj3Hgek65nEUYf7ziApYOGrfd8RSjM7Da:Uof9ZM1SRvff7znoqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5647b59a84a151f191994e1981c47568_JaffaCakes118

Files

5647b59a84a151f191994e1981c47568_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ