e76b594d80a25a503ff4bf0085a0cdb3_JaffaCakes118 | Triage

Sharing

General

Target

e76b594d80a25a503ff4bf0085a0cdb3_JaffaCakes118
Size

506KB
MD5

e76b594d80a25a503ff4bf0085a0cdb3
SHA1

e6c000a09b8a1e625b73493950803677fd4e6dfa
SHA256

6efef04d71bd6e7dec5744c4edbb607fde3ab29e65fd57ac2cd5bc077e2a96e9
SHA512

a12d04687b5669a042082151704e3002a76c7f6089a9751bec85c2665a068187206bb51c19ae6373d812f449fbe7131762ec36f0b87cadf9658cc74b73a31b1e
SSDEEP

12288:sy/4USGxg87XfAIkhnhvUXgfhmzBb5r90yFt9qWKfiOJ8JV:sx/CggPAI4SXgpmvuy9EiOJ8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e76b594d80a25a503ff4bf0085a0cdb3_JaffaCakes118

Files

e76b594d80a25a503ff4bf0085a0cdb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ