572cef8fd18182751d9cca9036a2bb3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

572cef8fd18182751d9cca9036a2bb3c_JaffaCakes118
Size

1000KB
MD5

572cef8fd18182751d9cca9036a2bb3c
SHA1

9183ae41dfdecfa4d1f204312ef183bd26305015
SHA256

eb938567ed24e806de90d1c0859c7e60e432e422fcf45d80350887a1f98027c1
SHA512

f285be9008ff7a31fcfd322c0605270c6e792ee6cadcf9fec3991e58c87552b3952766fe8cd94373f590103b333eaeb8e4facf68a63a0d8c599e1e6c6304211d
SSDEEP

24576:KSiQUwZI8ubxTrIzqFEv1bxCf75vN/dm23uPG+v:KJNTrTFEv1buF9b3szv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
572cef8fd18182751d9cca9036a2bb3c_JaffaCakes118

Files

572cef8fd18182751d9cca9036a2bb3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 886KB - Virtual size: 886KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ