e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118 | Triage

Sharing

General

Target

e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118
Size

634KB
MD5

e258998d52ed363732ca5dd9f4ac5602
SHA1

1ca86f2b294f3ab3efff61885ece0a83ae6ea984
SHA256

19eaa99708bc3434d74a8bad49f53605c42f833562a31de1e5b0285af1cbfa5e
SHA512

c70efa1fd052d31c1bac70e6c00c090f8ecc2c0be79fdd238cb94850cec63bfca7afb6026a19160133077f511c1df600589c071ca496cdf298a7d951da62e8fc
SSDEEP

6144:Z3OOCKLlcPKJEld2zJQPfuSlMHyaXXu6FQGkcC+V5R5azYBONNYJ7efR9tF:lOOZpUtlwX+zc7V5Rn1JyfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118

Files

e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ