572a6faa475d243ad2b39ec7ff4d11ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

572a6faa475d243ad2b39ec7ff4d11ec_JaffaCakes118
Size

31KB
MD5

572a6faa475d243ad2b39ec7ff4d11ec
SHA1

41010f28964058a67c6f319805148b2fcc8d7ab5
SHA256

62829ada59eb24334a39edc16a0f4e1e4ccf0fafb6eda6b2ad548e6f686853d3
SHA512

4382adcb14c2c9aacfb94dd0b4a640a5b3ce12e336604c8d0d6d9b739840df2394ec31eb533ac3c43d8c92ccc812ce8a6ef44934eddcbdc72f450368d76dc57c
SSDEEP

384:P6t0QeLljHCl9wXodRwbxe3gJy3PYX5vjzvuOhCTNnp9DvfYB37GRbnt8FvcrV1k:PE0RLljHoexEb/g3mTL9MB376rA0h1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
572a6faa475d243ad2b39ec7ff4d11ec_JaffaCakes118

Files

572a6faa475d243ad2b39ec7ff4d11ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.init
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ