e925b555bb602f6fc1738c9f4c2b482a_JaffaCakes118 | Triage

Sharing

General

Target

e925b555bb602f6fc1738c9f4c2b482a_JaffaCakes118
Size

409KB
MD5

e925b555bb602f6fc1738c9f4c2b482a
SHA1

7b299e146dea12ed344cc478691a63ff5bd5beef
SHA256

9d994f2c92dc29dde4cab49f0c9bb311b3adbb276b372fc65222ce75407d2bc9
SHA512

92540dbe0d21ee22124299fb64951abd124a4f1cb2a4fb0648d433d96da65b1d1bbc8a03c32cfae5eb0839f2b18305936f0c21e062529d0643c5b58513dfa808
SSDEEP

12288:shH639viAg0/89dOe9QOlKVdYs1KHcUsay:scdiF9nLcT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e925b555bb602f6fc1738c9f4c2b482a_JaffaCakes118

Files

e925b555bb602f6fc1738c9f4c2b482a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ